PT-2003-1206 · Scponly · Scponly

Publicado 2003-04-22 · Atualizado 2008-09-05 · CVE-2002-1469

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions scponly (affected versions not specified)

Description The issue is related to the improper verification of the path when finding the scp or sftp-server programs. This could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-1469

Produtos afetados

Scponly

Referências · 6

• 🔥 http://securityfocus.com/bid/5526 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/288245 · Exploit
• 🔥 https://exploit-db.com/exploits/21732 · Exploit
• http://sublimation.org/scponly · Nota
• http://iss.net/security_center/static/9913.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1469 · Nota de Segurança