|
|
CVE Reference: CVE-2006-0705 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-0705 |
|
|
Description: Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/24651 ST 1015619 SAID Secunia Advisory: SA18828 Secunia Advisory: SA18843 Secunia Advisory: SA24516 Secunia Advisory: SA29552 HP http://marc.info/?l=bugtraq&m=120654385125315&w=2 GENTOO http://security.gentoo.org/glsa/glsa-200703-13.xml CONFIRM http://support.wrq.com/techdocs/1882.html CERT-VN 419241 BID 16640 16625 |
|
| Return to the previous page. |
