Vulnerability Details : CVE-2006-2407

Products affected by CVE-2006-2407

Metasploit modules for CVE-2006-2407

• FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow

  Disclosure Date: 2006-05-12

  First seen: 2020-04-26

  exploit/windows/ssh/freeftpd_key_exchange

  This module exploits a simple stack buffer overflow in FreeFTPd 1.0.10 This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. This module is based on MC's freesshd_key_exchange exploi

  More information

• FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow

  Disclosure Date: 2006-05-12

  First seen: 2020-04-26

  exploit/windows/ssh/freesshd_key_exchange

  This module exploits a simple stack buffer overflow in FreeSSHd 1.0.9. This flaw is due to a buffer overflow error when handling a specially crafted key exchange algorithm string received from an SSH client. Authors: - MC <mc@metasploit.com>

  More information

CVSS scores for CVE-2006-2407

CWE ids for CVE-2006-2407

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
  Assigned by: nvd@nist.gov (Primary)

References for CVE-2006-2407