CVE-2006-0705

Опубликовано: 15 фев. 2006

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.

Ссылки

http://marc.info/?l=bugtraq&m=120654385125315&w=2
http://secunia.com/advisories/18828
Patch
Vendor Advisory
http://secunia.com/advisories/18843
Patch
Vendor Advisory
http://secunia.com/advisories/24516
Vendor Advisory
http://secunia.com/advisories/29552
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200703-13.xml
http://securitytracker.com/id?1015619
Patch
http://support.wrq.com/techdocs/1882.html
Patch
http://www.kb.cert.org/vuls/id/419241
Patch
US Government Resource
http://www.securityfocus.com/bid/16625
Patch
http://www.securityfocus.com/bid/16640
http://www.vupen.com/english/advisories/2006/0554
Vendor Advisory
http://www.vupen.com/english/advisories/2006/0555
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1008/references
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24651
http://marc.info/?l=bugtraq&m=120654385125315&w=2
http://secunia.com/advisories/18828
Patch
Vendor Advisory
http://secunia.com/advisories/18843
Patch
Vendor Advisory
http://secunia.com/advisories/24516
Vendor Advisory
http://secunia.com/advisories/29552
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0:*:unix:*:*:*:*:*

cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0:*:win:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1:*:unix:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.9:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0:*:unix:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0_build9:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.0:*:unix:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.3:*:unix:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:5.0:*:*:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:5.1:*:win:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:5.2:*:win:*:*:*:*:*

cpe:2.3:a:f-secure:f-secure_ssh_server:5.3:*:win:*:*:*:*:*

EPSS

Процентиль: 90%

0.0537

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-134

Связанные уязвимости

GHSA-2rx6-8ww2-27g3

github

почти 4 года назад

BDU:2015-09523

fstec

почти 19 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации