CVE-2007-1654 Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash...
HighCVSS 9.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsieben ssh library | = 1.1 | No fix listed |
| netsieben ssh library | = 1.1.5 | No fix listed |
| netsieben ssh library | = 1.1.6 | No fix listed |
| netsieben ssh library | = 1.2.0 | No fix listed |
| netsieben ssh library | = 1.03 | No fix listed |
References
- netsieben.com url-repurposed
- 43555 vdb-entry
- ne7ssh-addopenhandle-bo(33504) vdb-entry