A vulnerability has been reported in Reflection Secure IT, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a format string error in the SFTP component during logging of accessed file names. This can potentially be exploited to execute arbitrary code via a file with specially crafted file name.

Successful exploitation requires that a user is authenticated to the SFTP service.

Solution
Update to a fixed version.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
WRQ:
http://support.wrq.com/techdocs/1882.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers