« Volver al listado

CVE-2007-1654

Estado: ModificadaAlta (9.3)—

Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Netsieben — Netsieben SSH Library

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1654",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-24T00:19:00.000",
  "references": [
    {
      "url": "http://netsieben.com/files/CHANGELOG",
      "tags": [
        "URL Repurposed"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/43555",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33504",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://netsieben.com/files/CHANGELOG",
      "tags": [
        "URL Repurposed"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/43555",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33504",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assisted remote SFTP servers to cause a denial of service (crash) or possibly execute arbitrary code via multiple file transfers, related to multiple open file handles in SFTP (1) put and (2) get operations."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la función Ne7sshSftp::addOpenHandle en ne7ssh_sftp.cpp en NetSieben SSH Library (ne7ssh) anterior a 1.2.1 permite a atacantes con la intervención del usuario provocar denegación de servicio(caida) en servidores SFTP o posiblemente ejecutar código de su elección a través de múltiples transferencias de archivo, relacionado con múltiples manejadores de apertura de fichero en SFTP con operaciones (1)put y (2)get.\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:38:02.180",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C6BCC86-7837-4E95-B3B5-B3058DEE4057"
            },
            {
              "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17A4A775-0DB1-433E-BBC4-0F7469E381E1"
            },
            {
              "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8E4498D-4E53-4C42-BC27-1E573885F3DD"
            },
            {
              "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EE23DC1-8FCA-4887-A31B-9C55F2416206"
            },
            {
              "criteria": "cpe:2.3:a:netsieben:netsieben_ssh_library:1.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E141DD64-ED8A-4B2F-BA89-EDE952F4095B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}