| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 9.9 | $0-$5k | 0.27 |
A vulnerability, which was classified as very critical, has been found in cygwin 1.5.7-1. This issue affects some unknown functionality in the library cygwin1.dll of the file scp.exe. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. Impacted is confidentiality, integrity, and availability. The summary by CVE is:
Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19.
The weakness was released 11/29/2007 by Jesus Olmos Gonzalez (Website). The advisory is shared at cygwin.com. The identification of this vulnerability is CVE-2007-6181 since 11/29/2007. The attack may be initiated remotely. A simple authentication is required for exploitation. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/29/2021).
The vulnerability scanner Nessus provides a plugin with the ID 28330 (Cygwin Windows.
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
The vulnerability is also documented in the databases at SecurityFocus (BID 26557), X-Force (38670), Vulnerability Center (SBV-16983) and Tenable (28330).
Name
VulDB Meta Base Score: 9.9
VulDB Meta Temp Score: 9.9
VulDB Base Score: 9.9
VulDB Temp Score: 9.9
VulDB Vector: 🔍
VulDB Reliability: 🔍
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Class: Memory corruption
CWE: CWE-119
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 28330
Nessus Name: Cygwin Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Threat Intelligence
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍Recommended: no mitigation known
Status: 🔍
0-Day Time: 🔍
11/24/2007 🔍
11/27/2007 🔍
11/29/2007 🔍
11/29/2007 🔍
11/29/2007 🔍
11/29/2007 🔍
12/03/2007 🔍
03/16/2015 🔍
07/29/2021 🔍Advisory: cygwin.com
Researcher: Jesus Olmos Gonzalez
Status: Not defined
CVE: CVE-2007-6181 (🔍)
SecurityFocus: 26557 – Cygwin Filename Filename Buffer Overflow Vulnerability
X-Force: 38670
Vulnerability Center: 16983 – Cygwin Buffer Overflow Allows Remote Attacker to Execute Arbitrary Code with Root Privileges, Critical
Created: 03/16/2015 13:43
Updated: 07/29/2021 19:25
Changes: (3) source_nessus_risk exploit_price_0day vulnerability_cvss2_nvd_basescore
Complete: 🔍
Upgrade your account now!
