CVE-2006-2407
high · 7.5Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.
7.5
CVSS
71.4%
EPSS (exploit prob.)
99th
EPSS percentile
2006-05-16
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| freeftpd | freeftpd | 1.0.10 |
| freesshd | freesshd | 1.0.9 |
| weonlydo | wodsshserver | 1.2.7 |
| weonlydo | wodsshserver | 1.3.3_demo |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=full-disclosure&m=114764338702488&w=2
- http://secunia.com/advisories/19845
- http://secunia.com/advisories/19846
- http://secunia.com/advisories/20136
- http://securityreason.com/securityalert/901
- http://www.kb.cert.org/vuls/id/477960
- http://www.osvdb.org/25463
- http://www.osvdb.org/25569
- http://www.securityfocus.com/archive/1/434007/100/0/threaded
- http://www.securityfocus.com/archive/1/434038/100/0/threaded
- http://www.securityfocus.com/archive/1/434402/100/0/threaded
- http://www.securityfocus.com/archive/1/434415/100/0/threaded
- http://www.securityfocus.com/archive/1/434415/30/4920/threaded
- http://www.securityfocus.com/bid/17958
- http://www.vupen.com/english/advisories/2006/1785
- http://www.vupen.com/english/advisories/2006/1786
- http://www.vupen.com/english/advisories/2006/1842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26442
- http://marc.info/?l=full-disclosure&m=114764338702488&w=2
- http://secunia.com/advisories/19845
- http://secunia.com/advisories/19846
- http://secunia.com/advisories/20136
- http://securityreason.com/securityalert/901
- http://www.kb.cert.org/vuls/id/477960
- http://www.osvdb.org/25463
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-2407