CVE-2006-0705

2006-02-1511:06:00

CWE-134

[email protected]

web.nvd.nist.gov

cve

2006

0705

format string vulnerability

sftp servers

logging function

ssh

secure it unix server

reflection

f-secure ssh server

ssh tectia server

ssh shell server

remote authenticated users

arbitrary commands

stat command

7.1 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.

CPENameOperatorVersion
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq3.0.2
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq3.0.1
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq3.0.8
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq5.3
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq5.1
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq5.0
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq3.2.0
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq3.0.9
f-secure:f-secure_ssh_serverf-secure f-secure ssh servereq3.0.5
attachmatewrq:reflection_for_secure_it_serverattachmatewrq reflection for secure it servereq6.0

CPE	Name	Operator	Version
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	3.0.2
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	3.0.1
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	3.0.8
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	5.3
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	5.1
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	5.0
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	3.2.0
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	3.0.9
f-secure:f-secure_ssh_server	f-secure f-secure ssh server	eq	3.0.5
attachmatewrq:reflection_for_secure_it_server	attachmatewrq reflection for secure it server	eq	6.0