ID de Prueba:	1.3.6.1.4.1.25623.1.0.200012
Categoría:	Gain a shell remotely
Título:	FreeSSHD Key Exchange Buffer Overflow
Resumen:	A vulnerable version of FreeSSHd is installed on; the remote host.
Descripción:	Summary: A vulnerable version of FreeSSHd is installed on the remote host. Vulnerability Impact: The version installed does not validate key exchange strings send by a SSH client. This results in a buffer overflow and possible a compromise of the host if the client is sending a long key exchange string. Note : At this point the FreeSSHD Service is reported down. You should start it manually again. Solution: Upgrade to the latest release. See the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2407 BugTraq ID: 17958 http://www.securityfocus.com/bid/17958 Bugtraq: 20060514 POC exploit for freeSSHd version 1.0.9 (Google Search) http://www.securityfocus.com/archive/1/434007/100/0/threaded Bugtraq: 20060515 Re: [Full-disclosure] POC exploit for freeSSHd version 1.0.9 (Google Search) http://www.securityfocus.com/archive/1/434038/100/0/threaded Bugtraq: 20060517 BUGTRAQ:20060517 Re:POC exploit for freeFTPd 1.0.10 (Google Search) http://www.securityfocus.com/archive/1/434415/100/0/threaded Bugtraq: 20060517 POC exploit for freeFTPd 1.0.10 (Google Search) http://www.securityfocus.com/archive/1/434402/100/0/threaded Bugtraq: 20060517 Re:POC exploit for freeFTPd 1.0.10 (Google Search) http://www.securityfocus.com/archive/1/434415/30/4920/threaded CERT/CC vulnerability note: VU#477960 http://www.kb.cert.org/vuls/id/477960 http://marc.info/?l=full-disclosure&m=114764338702488&w=2 http://www.osvdb.org/25463 http://www.osvdb.org/25569 http://secunia.com/advisories/19845 http://secunia.com/advisories/19846 http://secunia.com/advisories/20136 http://securityreason.com/securityalert/901 http://www.vupen.com/english/advisories/2006/1785 http://www.vupen.com/english/advisories/2006/1786 http://www.vupen.com/english/advisories/2006/1842 XForce ISS Database: freesshd-key-exchange-bo(26442) https://exchange.xforce.ibmcloud.com/vulnerabilities/26442
Copyright	Copyright (C) 2008 Ferdy Riphagen

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.