← Vulnerability feed

Vulnerability record · CVE-2005-2771 · published 2 September 2005

CVE-2005-2771: F-secure ssh server vulnerability

F Secure · F Secure Ssh Server

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied.

10.0 CVSS 2.0 High EPSS 4.8% · top 8.3%
10.0CVSS 2.0 base score
4.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which might allow remote attackers to bypass intended restrictions and login to accounts that should be denied.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/16649/ Patch
http://securitytracker.com/id?1014835
http://support.wrq.com/techdocs/1910.html
http://www.kb.cert.org/vuls/id/758054 Third Party AdvisoryUS Government Resource
http://secunia.com/advisories/16649/ Patch
http://securitytracker.com/id?1014835
http://support.wrq.com/techdocs/1910.html
http://www.kb.cert.org/vuls/id/758054 Third Party AdvisoryUS Government Resource

Track CVE-2005-2771 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-2770Wrq reflection for secure it windows server vulnerabilityWRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Gu…EPSS 3.3%6.5CVE-2006-0705Attachmatewrq reflection for secure it server vulnerabilityFormat string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server b…EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2005-2771), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.