CVE-2006-0705 Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows...
MediumCVSS 6.5
EPSS 10.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| attachmatewrq reflection for secure it server | = 6.0 | No fix listed |
| f-secure ssh server | = 3.0.0 | No fix listed |
| f-secure ssh server | = 3.0.1 | No fix listed |
| f-secure ssh server | = 3.0.2 | No fix listed |
| f-secure ssh server | = 3.0.3 | No fix listed |
| f-secure ssh server | = 3.0.4 | No fix listed |
| f-secure ssh server | = 3.0.5 | No fix listed |
| f-secure ssh server | = 3.0.6 | No fix listed |
| f-secure ssh server | = 3.0.7 | No fix listed |
| f-secure ssh server | = 3.0.8 | No fix listed |
| f-secure ssh server | = 3.0.9 | No fix listed |
| f-secure ssh server | = 3.1.0 | No fix listed |
| f-secure ssh server | = 3.1.0_build9 | No fix listed |
| f-secure ssh server | = 3.2.0 | No fix listed |
| f-secure ssh server | = 3.2.3 | No fix listed |
| f-secure ssh server | = 5.0 | No fix listed |
| f-secure ssh server | = 5.1 | No fix listed |
| f-secure ssh server | = 5.2 | No fix listed |
| f-secure ssh server | = 5.3 | No fix listed |
References
- HPSBTU02322 vendor-advisory
- 18828 patch third-party-advisory vendor-advisory
- 18843 patch third-party-advisory vendor-advisory
- 24516 third-party-advisory vendor-advisory
- 29552 third-party-advisory vendor-advisory
- GLSA-200703-13 vendor-advisory
- 1015619 patch vdb-entry
- support.wrq.com patch
- VU#419241 patch third-party-advisory us-government-resource
- 16625 patch vdb-entry
- 16640 vdb-entry
- ADV-2006-0554 vdb-entry vendor-advisory
- ADV-2006-0555 vdb-entry vendor-advisory
- ADV-2008-1008 vdb-entry vendor-advisory
- sftp-logging-format-string(24651) vdb-entry