{"schemaVersion":3,"id":"CVE-2006-0705","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command.","dates":{"published":"2006-02-15T11:00:00.000Z","modified":"2024-08-07T16:41:29.194Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.5,"severity":"medium","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.10162,"percentile":0.95622,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.10162},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.10162,"percentile":0.95622}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10162,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.10162,"percentile":0.95622}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-134","name":"Use of Externally-Controlled Format String","description":"The product uses a function that accepts a format string as an argument, but the format string originates from an external source.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/134.html"}],"affected":[{"vendor":"attachmatewrq","product":"reflection_for_secure_it_server","name":"reflection for secure it server","label":"reflection_for_secure_it_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/attachmatewrq/reflection_for_secure_it_server"},{"vendor":"f-secure","product":"f-secure_ssh_server","name":"f-secure ssh server","label":"f-secure_ssh_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0.0","noFixRecorded":false,"fixedIn":null},{"text":"3.0.1","noFixRecorded":false,"fixedIn":null},{"text":"3.0.2","noFixRecorded":false,"fixedIn":null},{"text":"3.0.3","noFixRecorded":false,"fixedIn":null},{"text":"3.0.4","noFixRecorded":false,"fixedIn":null},{"text":"3.0.5","noFixRecorded":false,"fixedIn":null},{"text":"3.0.6","noFixRecorded":false,"fixedIn":null},{"text":"3.0.7","noFixRecorded":false,"fixedIn":null},{"text":"3.0.8","noFixRecorded":false,"fixedIn":null},{"text":"3.0.9","noFixRecorded":false,"fixedIn":null},{"text":"3.1.0","noFixRecorded":false,"fixedIn":null},{"text":"3.1.0_build9","noFixRecorded":false,"fixedIn":null},{"text":"3.2.0","noFixRecorded":false,"fixedIn":null},{"text":"3.2.3","noFixRecorded":false,"fixedIn":null},{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"5.1","noFixRecorded":false,"fixedIn":null},{"text":"5.2","noFixRecorded":false,"fixedIn":null},{"text":"5.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.1.0 | 3.1.0_build9 | 3.2.0 | 3.2.3 | 5.0 | 5.1 | 5.2 | 5.3","eol":null,"hubHref":"/vendor/f-secure/f-secure_ssh_server"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://securitytracker.com/id?1015619","label":"securitytracker.com/id?1015619","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Patch"]},{"url":"http://support.wrq.com/techdocs/1882.html","label":"support.wrq.com/techdocs/1882.html","hostname":"support.wrq.com","tags":["X Refsource CONFIRM","Patch"]},{"url":"http://secunia.com/advisories/24516","label":"secunia.com/advisories/24516","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29552","label":"secunia.com/advisories/29552","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24651","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24651","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.kb.cert.org/vuls/id/419241","label":"www.kb.cert.org/vuls/id/419241","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","Patch","US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=120654385125315&w=2","label":"marc.info?l=bugtraq&m=120654385125315&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://secunia.com/advisories/18828","label":"secunia.com/advisories/18828","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200703-13.xml","label":"security.gentoo.org/glsa/glsa-200703-13.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.vupen.com/english/advisories/2006/0555","label":"www.vupen.com/english/advisories/2006/0555","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/0554","label":"www.vupen.com/english/advisories/2006/0554","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16625","label":"www.securityfocus.com/bid/16625","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Patch"]},{"url":"http://www.vupen.com/english/advisories/2008/1008/references","label":"www.vupen.com/english/advisories/2008/1008/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16640","label":"www.securityfocus.com/bid/16640","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://secunia.com/advisories/18843","label":"secunia.com/advisories/18843","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-02-15T11:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T16:41:29.194Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:25:00.852Z","stale":false,"partial":false}}