CVE-2006-2407
Published May 16, 2006
Last updated 6 years ago
Overview
- Description
- Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:freeftpd:freeftpd:1.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07F34D7A-D6EB-4818-83AD-0A6B40F4F37E"
},
{
"criteria": "cpe:2.3:a:freesshd:freesshd:1.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0856F72-9F1E-425C-B434-BB9DDF88BED6"
},
{
"criteria": "cpe:2.3:a:weonlydo:wodsshserver:1.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CF7CF76-6EE4-481B-8034-8E4849AD6FEF"
},
{
"criteria": "cpe:2.3:a:weonlydo:wodsshserver:1.3.3_demo:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B750682-F305-4AAF-A973-88DA5F3200E0"
}
],
"operator": "OR"
}
]
}
]