CVE-2007-6181

Cygwin < 1.5.19 - Heap-Based Buffer Overflow via Long Filename

Title source: llm

Description

Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a filename with a certain length, as demonstrated by a remote authenticated user who uses the SCP protocol to send a file to the Cygwin machine, and thereby causes scp.exe on this machine to execute, and then overwrite heap memory with characters from the filename. NOTE: it is also reported that a related issue might exist in 1.5.7 through 1.5.19.

References (6)

Core 6

Core References

Vendor Advisory mailing-list x_refsource_mlist

http://cygwin.com/ml/cygwin-developers/2007-11/msg00026.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/484153/100/0/threaded

Exploit, Vendor Advisory mailing-list x_refsource_mlist

http://cygwin.com/ml/cygwin-developers/2007-11/msg00024.html

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/3406

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26557

Exploit, Patch, Vendor Advisory mailing-list x_refsource_mlist

http://cygwin.com/ml/cygwin-developers/2007-11/msg00005.html

Scores

EPSS 0.0559

EPSS Percentile 92.0%

Details

CWE

CWE-119

Status published

Products (1)

redhat/cygwin < 1.5.19

Published Nov 30, 2007

Tracked Since Feb 18, 2026