CVE - CVE-2006-0705

CVE-ID
CVE-2006-0705	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:http://support.wrq.com/techdocs/1882.html GENTOO:GLSA-200703-13 URL:http://security.gentoo.org/glsa/glsa-200703-13.xml HP:HPSBTU02322 URL:http://marc.info/?l=bugtraq&m=120654385125315&w=2 HP:SSRT080011 URL:http://marc.info/?l=bugtraq&m=120654385125315&w=2 CERT-VN:VU#419241 URL:http://www.kb.cert.org/vuls/id/419241 BID:16625 URL:http://www.securityfocus.com/bid/16625 BID:16640 URL:http://www.securityfocus.com/bid/16640 VUPEN:ADV-2006-0554 URL:http://www.vupen.com/english/advisories/2006/0554 VUPEN:ADV-2006-0555 URL:http://www.vupen.com/english/advisories/2006/0555 VUPEN:ADV-2008-1008 URL:http://www.vupen.com/english/advisories/2008/1008/references SECTRACK:1015619 URL:http://securitytracker.com/id?1015619 SECUNIA:18828 URL:http://secunia.com/advisories/18828 SECUNIA:18843 URL:http://secunia.com/advisories/18843 SECUNIA:24516 URL:http://secunia.com/advisories/24516 SECUNIA:29552 URL:http://secunia.com/advisories/29552 XF:sftp-logging-format-string(24651) URL:http://xforce.iss.net/xforce/xfdb/24651
Date Entry Created
20060215	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060215)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2006-0705