Back to CVE Browser

CVE-2005-2770

HIGH

7.5

CVSS Severity Score

EPSS Score0.1260%

EPSS Percentile1.44th

PublishedSep 2, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authentication has been configured, which allows remote attackers to use the original names during login.

Affected Platforms (CPE)

📦

Wrq

Wrq Reflection For Secure It Windows Server

= 6.0

References & Advisories

🔗 http://secunia.com/advisories/16649/

🔗 http://securitytracker.com/id?1014835

🔗 http://support.wrq.com/techdocs/1910.html

🔗 http://www.kb.cert.org/vuls/id/902110

🔗 http://secunia.com/advisories/16649/

🔗 http://securitytracker.com/id?1014835

🔗 http://support.wrq.com/techdocs/1910.html

🔗 http://www.kb.cert.org/vuls/id/902110

Related Vulnerabilities

CVE-2005-277110.0

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-...

CVE-2005-266810.0

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before...

CVE-2005-266910.0

Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote at...

CVE-2005-103710.0

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.