AttachmateWRQ Reflection for Secure IT Server SFTP Format String
Medium Nessus Plugin ID 20902
SynopsisThe remote SSH server is affected by a format string vulnerability.
DescriptionThe remote host is running AttachmateWRQ Reflection for Secure IT Server / F-Secure SSH Server, a commercial SSH server.
According to its banner, the installed version of this software contains a format string vulnerability in its sftp subsystem. A remote, authenticated attacker may be able to execute arbitrary code on the affected host subject to his privileges or crash the server itself.
SolutionEither upgrade as described in the vendor advisory above or edit the software's configuration to disable the SFTP subsystem.