CVE-2006-2407
freeFTPd 1.0.10 - Stack-Based Buffer Overflow via Long Key Exchange Algorithm String
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2006-2407.
PoCs published by Metasploit, Tauqeer Ahmad, including Metasploit module exploits/windows/ssh/freesshd_key_exchange.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in FreeSSHd 1.0.9 by sending a maliciously crafted key exchange algorithm string during the SSH handshake. It includes a payload for remote code execution and is designed for specific Windows targets.
Description
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string.
Exploits (5)
This exploit targets a stack buffer overflow in FreeSSHd 1.0.9 by sending a maliciously crafted key exchange algorithm string during the SSH handshake. It includes a payload for remote code execution and is designed for specific Windows targets.
This exploit targets a stack buffer overflow in FreeFTPd 1.0.10 via a malformed SSH key exchange algorithm string. It sends a crafted payload to trigger the vulnerability and execute arbitrary code.
This exploit targets a buffer overflow vulnerability in freeSSHd 1.0.9, leveraging a JMP ESP instruction in USER32.dll to execute a bind shell on port 1977. The payload is a Metasploit-generated shellcode for Windows systems.
This Metasploit module exploits a stack buffer overflow in FreeSSHd 1.0.9 by sending a maliciously crafted key exchange algorithm string, leading to remote code execution. The exploit targets specific return addresses for Windows 2000 and XP systems.
This Metasploit module exploits a stack buffer overflow in FreeFTPd 1.0.10 by sending a maliciously crafted key exchange algorithm string during SSH handshake. It targets multiple Windows versions with specific return addresses to achieve remote code execution.