CVE-2007-1654

2007-03-2400:19:00

[email protected]

web.nvd.nist.gov

cve-2007-1654

buffer overflow

ne7sshsftp

ne7ssh_sftp.cpp

netsieben ssh library

remote sftp

denial of service

code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.0%

JSON

Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.

Affected configurations

NVD

Node

netsiebennetsieben_ssh_libraryMatch1.1

netsiebennetsieben_ssh_libraryMatch1.1.5

netsiebennetsieben_ssh_libraryMatch1.1.6

netsiebennetsieben_ssh_libraryMatch1.2.0

netsiebennetsieben_ssh_libraryMatch1.03

CPENameOperatorVersion
netsieben:netsieben_ssh_librarynetsieben netsieben ssh libraryeq1.1
netsieben:netsieben_ssh_librarynetsieben netsieben ssh libraryeq1.1.5
netsieben:netsieben_ssh_librarynetsieben netsieben ssh libraryeq1.1.6
netsieben:netsieben_ssh_librarynetsieben netsieben ssh libraryeq1.2.0
netsieben:netsieben_ssh_librarynetsieben netsieben ssh libraryeq1.03

CPE	Name	Operator	Version
netsieben:netsieben_ssh_library	netsieben netsieben ssh library	eq	1.1
netsieben:netsieben_ssh_library	netsieben netsieben ssh library	eq	1.1.5
netsieben:netsieben_ssh_library	netsieben netsieben ssh library	eq	1.1.6
netsieben:netsieben_ssh_library	netsieben netsieben ssh library	eq	1.2.0
netsieben:netsieben_ssh_library	netsieben netsieben ssh library	eq	1.03