CVE-2007-1654

Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.

Link	Resource
http://netsieben.com/files/CHANGELOG
http://osvdb.org/43555
https://exchange.xforce.ibmcloud.com/vulnerabilities/33504

Configuration 1

cpe:2.3:a:netsieben:netsieben_ssh_library:1.1:*:*:*:*:*:*:* cpe:2.3:a:netsieben:netsieben_ssh_library:1.2.0:*:*:*:*:*:*:* cpe:2.3:a:netsieben:netsieben_ssh_library:1.03:*:*:*:*:*:*:* cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.6:*:*:*:*:*:*:* cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.5:*:*:*:*:*:*:*

---

Published : 2007-03-24 12:19

Updated : 2017-07-29 01:30

---

NVD link : CVE-2007-1654

Mitre link : CVE-2007-1654

No products.

NVD-CWE-Other