- Description
- Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C6BCC86-7837-4E95-B3B5-B3058DEE4057"
},
{
"criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17A4A775-0DB1-433E-BBC4-0F7469E381E1"
},
{
"criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8E4498D-4E53-4C42-BC27-1E573885F3DD"
},
{
"criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EE23DC1-8FCA-4887-A31B-9C55F2416206"
},
{
"criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E141DD64-ED8A-4B2F-BA89-EDE952F4095B"
}
],
"operator": "OR"
}
]
}
]