GCVE-110-CERTCC-2006-477960

Advisory Published

Vulnetix · Advisory published May 12, 2006

The WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate the length of key exchange algorithm strings. This may allow a remote, unauthenticated attacker to execute arbitrary code.

Download JSON Open in Console

Risk Scores

certcc-cam

impact19population11exploitation10widely_known20score_current32.9175ease_of_exploitation14

certcc-vrda

d1_impact4d1_population2d1_direct_report0

Aliases

CVE-2006-2407

References

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

url

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

url

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

url

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

url

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

url

WeOnlyDo! Software wodSSHServer ActiveX component fails to properly validate key exchange algorithm strings

advisory

Browse GCVE Records

74,352 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON