medium4.6
CVE-2006-0225
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
Impact
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | Versions 3.0, 3.0.1, 3.0.1p1, 3.0.2, 3.0.2p1, 3.0p1 |
References
- NVD record
- CVE.org record
- http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability
- http://docs.info.apple.com/article.html?artnum=305214
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
- http://secunia.com/advisories/18579
- http://secunia.com/advisories/18595
- http://secunia.com/advisories/18650
- http://secunia.com/advisories/18736
- http://secunia.com/advisories/18798
- http://secunia.com/advisories/18850
- http://secunia.com/advisories/18910
- http://secunia.com/advisories/18964
- http://secunia.com/advisories/18969
- http://secunia.com/advisories/18970
- http://secunia.com/advisories/19159
- http://secunia.com/advisories/20723
- http://secunia.com/advisories/21129
- http://secunia.com/advisories/21262
- http://secunia.com/advisories/21492
- http://secunia.com/advisories/21724
- http://secunia.com/advisories/22196
- http://secunia.com/advisories/23241
- http://secunia.com/advisories/23340
- http://secunia.com/advisories/23680
- http://secunia.com/advisories/24479