CVE-2006-2407

60Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 71%

de la publicación al arma0 días

Publicada en NVD16 may

1ª PoC15 may

metasploit12 may

probabilidad de explotación

71%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

3 exploit(s) público(s)

Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16462 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16461 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1787

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://marc.info/?l=full-disclosure&m=114764338702488&w=2 http://secunia.com/advisories/19845 http://secunia.com/advisories/19846 http://secunia.com/advisories/20136 http://securityreason.com/securityalert/901 https://exchange.xforce.ibmcloud.com/vulnerabilities/26442 http://www.kb.cert.org/vuls/id/477960 http://www.osvdb.org/25463 http://www.osvdb.org/25569 http://www.securityfocus.com/archive/1/434007/100/0/threaded http://www.securityfocus.com/archive/1/434038/100/0/threaded http://www.securityfocus.com/archive/1/434402/100/0/threaded