CVE-2005-2771 WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which....
HighCVSS 10.0
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure ssh server | = 5.1 | No fix listed |
| f-secure ssh server | = 5.2 | No fix listed |
| f-secure ssh server | = 5.3 | No fix listed |
| wrq reflection for secure it windows server | = 6.0 | No fix listed |
References
- 16649 patch third-party-advisory
- 1014835 vdb-entry
- support.wrq.com
- VU#758054 third-party-advisory us-government-resource