PT-2007-7072 · Red Hat · Cygwin

Published 2007-11-30 · Updated 2018-10-26 · CVE-2007-6181

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cygwin versions 1.5.7 and earlier Cygwin versions 1.5.7 through 1.5.19

Description A heap-based buffer overflow issue exists, allowing context-dependent attackers to execute arbitrary code via a filename with a certain length. This can be demonstrated by a remote authenticated user using the SCP protocol to send a file to the Cygwin machine, causing scp.exe to execute and overwrite heap memory with characters from the filename.

Recommendations For Cygwin versions 1.5.7 and earlier, update to a version later than 1.5.19 to resolve the issue. For Cygwin versions 1.5.7 through 1.5.19, update to a version later than 1.5.19 to resolve the issue. As a temporary workaround, consider restricting access to the SCP protocol to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-6181

Affected Products

Cygwin

References · 7

• 🔥 http://cygwin.com/ml/cygwin-developers/2007-11/msg00024.html · Exploit
• 🔥 http://cygwin.com/ml/cygwin-developers/2007-11/msg00005.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6181 · Security Note
• http://cygwin.com/ml/cygwin-developers/2007-11/msg00026.html · Vendor Advisory
• http://securityreason.com/securityalert/3406 · Note
• http://securityfocus.com/bid/26557 · Note
• http://securityfocus.com/archive/1/484153/100/0/threaded · Note