NVD脆弱性詳細

CVE-2006-0705

概要	Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.
公表日	2006年2月15日20:06
登録日	2021年1月29日15:31
最終更新日	2017年7月20日10:29

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0::unix:::::
cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0::win:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.0:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.2:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.3:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.4:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.5:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.6:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.7:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.8:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.9:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0_build9:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.0::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.3::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:5.0:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:5.1::win:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:5.2::win:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:5.3::win:::::

関連情報、対策とツール

No	URL	refsource	タグ
1	http://marc.info/?l=bugtraq&m=120654385125315&w=2	HP
2	http://secunia.com/advisories/18828	SECUNIA	Patch Vendor Advisory
3	http://secunia.com/advisories/18843	SECUNIA	Patch Vendor Advisory
4	http://secunia.com/advisories/24516	SECUNIA	Vendor Advisory
5	http://secunia.com/advisories/29552	SECUNIA	Vendor Advisory
6	http://security.gentoo.org/glsa/glsa-200703-13.xml	GENTOO
7	http://securitytracker.com/id?1015619	SECTRACK	Patch
8	http://support.wrq.com/techdocs/1882.html	CONFIRM	Patch
9	http://www.kb.cert.org/vuls/id/419241	CERT-VN	Patch US Government Resource
10	http://www.securityfocus.com/bid/16625	BID	Patch
11	http://www.securityfocus.com/bid/16640	BID
12	http://www.vupen.com/english/advisories/2006/0554	VUPEN	Vendor Advisory
13	http://www.vupen.com/english/advisories/2006/0555	VUPEN	Vendor Advisory
14	http://www.vupen.com/english/advisories/2008/1008/references	VUPEN	Vendor Advisory
15	https://exchange.xforce.ibmcloud.com/vulnerabilities/24651	XF

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-134	書式文字列の問題	https://cwe.mitre.org/data/definitions/134.html

構成1	以上	以下	より上	未満
cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0::unix:::::
cpe:2.3:a:attachmatewrq:reflection_for_secure_it_server:6.0::win:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.0:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.1::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.2:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.3:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.4:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.5:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.6:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.7:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.8:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.0.9:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.1.0_build9:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.0::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:3.2.3::unix:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:5.0:::::::*
cpe:2.3:a:f-secure:f-secure_ssh_server:5.1::win:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:5.2::win:::::
cpe:2.3:a:f-secure:f-secure_ssh_server:5.3::win:::::