SSH: FreeSSHd Key Exchange Algorithm String Buffer Overflow

This signature detects attempts to exploit a known vulnerability in FreeSSHd service. Attackers, sending a maliciously crafted SSH key exchange, which is designed to exploit a buffer overflow, can execute arbitrary code with SYSTEM privileges on the server.

Extended Description

Multiple SSH server implementations are prone to a remote buffer-overflow vulnerability. The applications fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. A successful attack may facilitate arbitrary code execution. Exploiting this vulnerability may allow an attacker to gain administrative access on targeted computers.

Affected Products

Freeftpd freeftpd

References

BugTraq: 17958

CVE: CVE-2006-2407

URL: http://www.securityfocus.com/archive/1/434007 http://freesshd.com/

Short Name

SSH:OVERFLOW:FREESSHD-KEY-OF

Severity

Major

Recommended

False

Recommended Action

Drop

SSH: FreeSSHd Key Exchange Algorithm String Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?