Test ID:	1.3.6.1.4.1.25623.1.0.200012
Category:	Gain a shell remotely
Title:	FreeSSHD Key Exchange Buffer Overflow
Summary:	A vulnerable version of FreeSSHd is installed on; the remote host.
Description:	Summary: A vulnerable version of FreeSSHd is installed on the remote host. Vulnerability Impact: The version installed does not validate key exchange strings send by a SSH client. This results in a buffer overflow and possible a compromise of the host if the client is sending a long key exchange string. Note : At this point the FreeSSHD Service is reported down. You should start it manually again. Solution: Upgrade to the latest release. See the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2407 BugTraq ID: 17958 http://www.securityfocus.com/bid/17958 Bugtraq: 20060514 POC exploit for freeSSHd version 1.0.9 (Google Search) http://www.securityfocus.com/archive/1/434007/100/0/threaded Bugtraq: 20060515 Re: [Full-disclosure] POC exploit for freeSSHd version 1.0.9 (Google Search) http://www.securityfocus.com/archive/1/434038/100/0/threaded Bugtraq: 20060517 BUGTRAQ:20060517 Re:POC exploit for freeFTPd 1.0.10 (Google Search) http://www.securityfocus.com/archive/1/434415/100/0/threaded Bugtraq: 20060517 POC exploit for freeFTPd 1.0.10 (Google Search) http://www.securityfocus.com/archive/1/434402/100/0/threaded Bugtraq: 20060517 Re:POC exploit for freeFTPd 1.0.10 (Google Search) http://www.securityfocus.com/archive/1/434415/30/4920/threaded CERT/CC vulnerability note: VU#477960 http://www.kb.cert.org/vuls/id/477960 http://marc.info/?l=full-disclosure&m=114764338702488&w=2 http://www.osvdb.org/25463 http://www.osvdb.org/25569 http://secunia.com/advisories/19845 http://secunia.com/advisories/19846 http://secunia.com/advisories/20136 http://securityreason.com/securityalert/901 http://www.vupen.com/english/advisories/2006/1785 http://www.vupen.com/english/advisories/2006/1786 http://www.vupen.com/english/advisories/2006/1842 XForce ISS Database: freesshd-key-exchange-bo(26442) https://exchange.xforce.ibmcloud.com/vulnerabilities/26442
Copyright	Copyright (C) 2008 Ferdy Riphagen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.