CVE-2005-2770: High severity WRQ WRQ Reflection for Secure IT Windows Server vulnerability

Published Sep 2, 2005

Updated

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login.

Affected Software

1 affected component

WRQ WRQ Reflection for Secure IT Windows Server=6.0

Remediation

Patch Available

http://secunia.com/advisories/16649/

Event History

Sep 2, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2770?

CVE-2005-2770 is considered a medium severity vulnerability due to its potential for unauthorized access.

How do I fix CVE-2005-2770?

To fix CVE-2005-2770, ensure that SSH key authentication is configured under accounts that have not been renamed.

What does CVE-2005-2770 exploit?

CVE-2005-2770 exploits the improper handling of renamed Windows Administrator or Guest accounts in SSH key authentication.

Who is affected by CVE-2005-2770?

CVE-2005-2770 affects users of WRQ Reflection for Secure IT Windows Server version 6.0.

What are the potential consequences of CVE-2005-2770?

The potential consequences of CVE-2005-2770 include unauthorized remote access using original account names.