CVE-2007-1654

Published Mar 24, 2007

Last updated 9 months ago

Overview

Description: Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9C6BCC86-7837-4E95-B3B5-B3058DEE4057"
          },
          {
            "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17A4A775-0DB1-433E-BBC4-0F7469E381E1"
          },
          {
            "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B8E4498D-4E53-4C42-BC27-1E573885F3DD"
          },
          {
            "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2EE23DC1-8FCA-4887-A31B-9C55F2416206"
          },
          {
            "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.03:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E141DD64-ED8A-4B2F-BA89-EDE952F4095B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References