vulnwire
7.5high

CVE-2005-2770

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administr…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.3%
percentile 89%
Public exploits
0
none known

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login.

Exploit prediction (EPSS)

3.33% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • securitytracker.com /id?1014835 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • support.wrq.com /techdocs/1910.html · x_refsource_CONFIRM, x_transferred
  • kb.cert.org /vuls/id/902110 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • secunia.com /advisories/16649/ · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.