NetSight
IP …
high7.5Public exploit code

CVE-2006-2407

Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3)…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.

Affected products

VendorProductAffected versions
FreeftpdFreeftpd
Version 1.0.10
FreesshdFreesshd
Version 1.0.9
WeonlydoWodsshserver
Versions 1.2.7, 1.3.3_demo

Weakness classification

CWE-119

References