Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2007-6181

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.057
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 8.5
Products affected by CVE-2007-6181
  • Redhat » Cygwin » Version: N/A
    cpe:2.3:a:redhat:cygwin:-
  • Redhat » Cygwin » Version: 1.5.19
    cpe:2.3:a:redhat:cygwin:1.5.19
  • Redhat » Cygwin » Version: 1.5.7
    cpe:2.3:a:redhat:cygwin:1.5.7
  • Redhat » Cygwin » Version: 1.5.7-1
    cpe:2.3:a:redhat:cygwin:1.5.7-1


Products
Pricing
Contact Us

Shodan ® - All rights reserved