Published: 25/01/2006 Updated: 19/10/2018

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Openbsd

scp in OpenSSH 4.2p1 allows malicious users to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openbsd openssh 3.0p1
openbsd openssh 3.1
openbsd openssh 3.4
openbsd openssh 3.4p1
openbsd openssh 3.7
openbsd openssh 3.7.1
openbsd openssh 3.7.1p2
openbsd openssh 4.0p1
openbsd openssh 4.1p1
openbsd openssh 3.0.2
openbsd openssh 3.0.2p1
openbsd openssh 3.3
openbsd openssh 3.3p1
openbsd openssh 3.6.1p1
openbsd openssh 3.6.1p2
openbsd openssh 3.9.1
openbsd openssh 3.9.1p1
openbsd openssh 3.0
openbsd openssh 3.1p1
openbsd openssh 3.2
openbsd openssh 3.5
openbsd openssh 3.5p1
openbsd openssh 3.8
openbsd openssh 3.8.1
openbsd openssh 4.2p1
openbsd openssh 3.0.1
openbsd openssh 3.0.1p1
openbsd openssh 3.2.2p1
openbsd openssh 3.2.3p1
openbsd openssh 3.6
openbsd openssh 3.6.1
openbsd openssh 3.8.1p1
openbsd openssh 3.9

Debian Bug report logs - #349645 ssh: local code execution in scp [CVE-2006-0225] Package: openssh; Maintainer for openssh is Debian OpenSSH Maintainers <debian-ssh@listsdebianorg>; Reported by: Martin Pitt <mpitt@debianorg> Date: Tue, 24 Jan 2006 10:33:07 UTC Severity: important Tags: patch, security Merged with ...

Tomas Mraz discovered a shell code injection flaw in scp When doing local-to-local or remote-to-remote copying, scp expanded shell escape characters By tricking an user into using scp on a specially crafted file name (which could also be caught by using an innocuous wild card like ‘*‘), an attacker could exploit this to execute arbitrary shel ...

NVD-CWE-Other https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026 http://www.securityfocus.com/bid/16369 http://secunia.com/advisories/18579 http://secunia.com/advisories/18595 http://www.trustix.org/errata/2006/0004 http://securitytracker.com/id?1015540 http://secunia.com/advisories/18650 http://secunia.com/advisories/18736 ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch http://www.novell.com/linux/security/advisories/2006_08_openssh.html http://secunia.com/advisories/18798 http://secunia.com/advisories/18850 http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802 http://secunia.com/advisories/18910 http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml http://www.ubuntu.com/usn/usn-255-1 http://www.osvdb.org/22692 http://secunia.com/advisories/18964 http://secunia.com/advisories/18969 http://secunia.com/advisories/18970 http://www.redhat.com/support/errata/RHSA-2006-0044.html http://secunia.com/advisories/19159 http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751 http://secunia.com/advisories/20723 http://www.redhat.com/support/errata/RHSA-2006-0298.html http://secunia.com/advisories/21129 ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc http://secunia.com/advisories/21262 http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm http://secunia.com/advisories/21492 http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm http://secunia.com/advisories/21724 http://www.redhat.com/support/errata/RHSA-2006-0698.html http://secunia.com/advisories/22196 http://secunia.com/advisories/23241 http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm http://secunia.com/advisories/23340 http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html http://secunia.com/advisories/23680 http://docs.info.apple.com/article.html?artnum=305214 http://secunia.com/advisories/24479 http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:034 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1 http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://secunia.com/advisories/25607 http://secunia.com/advisories/25936 http://securityreason.com/securityalert/462 http://www.vupen.com/english/advisories/2007/0930 http://www.vupen.com/english/advisories/2006/0306 http://www.vupen.com/english/advisories/2007/2120 http://www.vupen.com/english/advisories/2006/4869 http://www.vupen.com/english/advisories/2006/2490 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112 http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html https://exchange.xforce.ibmcloud.com/vulnerabilities/24305 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138 http://www.securityfocus.com/archive/1/425397/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349645 https://usn.ubuntu.com/255-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook