Back to CVE Browser

CVE-2005-2771

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0790%

EPSS Percentile29.91th

PublishedSep 2, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied.

Affected Platforms (CPE)

📦

F Secure

F Secure Ssh Server

= 5.1

📦

F Secure

F Secure Ssh Server

= 5.2

📦

F Secure

F Secure Ssh Server

= 5.3

📦

Wrq

Wrq Reflection For Secure It Windows Server

= 6.0

References & Advisories

🔗 http://secunia.com/advisories/16649/

🔗 http://securitytracker.com/id?1014835

🔗 http://support.wrq.com/techdocs/1910.html

🔗 http://www.kb.cert.org/vuls/id/758054

🔗 http://secunia.com/advisories/16649/

🔗 http://securitytracker.com/id?1014835

🔗 http://support.wrq.com/techdocs/1910.html

🔗 http://www.kb.cert.org/vuls/id/758054

Related Vulnerabilities

CVE-2026-09668.2

A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length inp...

CVE-2021-347188.1

A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to overwrite and ...

CVE-2021-15727.8

A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account un...

CVE-2020-32007.7

A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated...