Back
CVE-2006-0705
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.
Published: Feb 15, 2006
Modified: Jun 16, 2026
CWE-134
CVSS Metrics
Affected Products (22)
| Vendor | Product | Version |
|---|---|---|
| attachmatewrq | reflection_for_secure_it_server | 6.0 |
| attachmatewrq | reflection_for_secure_it_server | 6.0 |
| f-secure | f-secure_ssh_server | 3.0.0 |
| f-secure | f-secure_ssh_server | 3.0.1 |
| f-secure | f-secure_ssh_server | 3.0.1 |
| f-secure | f-secure_ssh_server | 3.0.2 |
| f-secure | f-secure_ssh_server | 3.0.3 |
| f-secure | f-secure_ssh_server | 3.0.4 |
| f-secure | f-secure_ssh_server | 3.0.5 |
| f-secure | f-secure_ssh_server | 3.0.6 |
| f-secure | f-secure_ssh_server | 3.0.7 |
| f-secure | f-secure_ssh_server | 3.0.8 |
| f-secure | f-secure_ssh_server | 3.0.9 |
| f-secure | f-secure_ssh_server | 3.1.0 |
| f-secure | f-secure_ssh_server | 3.1.0 |
| f-secure | f-secure_ssh_server | 3.1.0_build9 |
| f-secure | f-secure_ssh_server | 3.2.0 |
| f-secure | f-secure_ssh_server | 3.2.3 |
| f-secure | f-secure_ssh_server | 5.0 |
| f-secure | f-secure_ssh_server | 5.1 |
…and 2 more
GitHub Security Advisory GHSA-2rx6-8ww2-27g3
Format string vulnerability in a logging function as used by various SFTP servers, including (1)...
References (30)
- http://marc.info/?l=bugtraq&m=120654385125315&w=2
- http://secunia.com/advisories/18828 Patch, Vendor Advisory
- http://secunia.com/advisories/18843 Patch, Vendor Advisory
- http://secunia.com/advisories/24516 Vendor Advisory
- http://secunia.com/advisories/29552 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200703-13.xml
- http://securitytracker.com/id?1015619 Patch
- http://support.wrq.com/techdocs/1882.html Patch
- http://www.kb.cert.org/vuls/id/419241 Patch, US Government Resource
- http://www.securityfocus.com/bid/16625 Patch
- http://www.securityfocus.com/bid/16640
- http://www.vupen.com/english/advisories/2006/0554 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0555 Vendor Advisory
- http://www.vupen.com/english/advisories/2008/1008/references Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24651
Risk Scores
CVSS Score
6.5 / 10
EPSS Score
10.16%
Top 5% most likely to be exploited
Threat Score
29 / 100
Data Sources
NVD
EPSS
GitHub