SSH Tectia Server SFTP Filename Logging Format String
Medium Nessus Network Monitor Plugin ID 3432
SynopsisThe remote SSH server may be affected by a format string vulnerability.
DescriptionThe remote host is running SSH Tectia Server, a commercial SSH server. According to its banner, the installed version of this software contains a format string vulnerability in its SFTP subsystem. An authenticated remote attacker may be able to execute arbitrary code on the affected host subject to his privileges or crash the server itself.
SolutionUpgrade to version 4.3.7, 4.4.2 or higher.