high7.5Public exploit code
CVE-2006-3252
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Private Wire Gateway - Remote Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified
- PrivateWire Gateway 3.7 (Windows x86) - Remote Buffer Overflow (Metasploit)2006-10-29 · remote · windows_x86 · Verified
Impact
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Algorithmic Research | Privatewire Gateway | Version 3.7 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20812
- http://securityreason.com/securityalert/1152
- http://securitytracker.com/id?1016382
- http://www.securityfocus.com/archive/1/438329/100/0/threaded
- http://www.securityfocus.com/bid/18647
- http://www.vupen.com/english/advisories/2006/2549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27430
- http://secunia.com/advisories/20812
- http://securityreason.com/securityalert/1152
- http://securitytracker.com/id?1016382
- http://www.securityfocus.com/archive/1/438329/100/0/threaded
- http://www.securityfocus.com/bid/18647
- http://www.vupen.com/english/advisories/2006/2549
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27430