PT-2004-1077 · Openssh+3 · Openssh+4

CVE-2004-0175

·

Publicado

2004-06-03

·

Atualizado

2024-07-08

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 3.4p1 rsh-server-0.17 rsh-0.17
Description The issue is related to a directory traversal vulnerability in the scp component of OpenSSH, which can be exploited by remote malicious servers to overwrite arbitrary files. This vulnerability can lead to a breach of protected information integrity. The exploitation can be carried out remotely.
Recommendations For OpenSSH versions prior to 3.4p1, update to version 3.4p1 or later to resolve the issue. For rsh-server-0.17 and rsh-0.17, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

ALT-PU-2024-3921
ALT-PU-2024-4077
ALT-PU-2024-4467
ALT-PU-2024-9513
BDU:2015-07734
BDU:2015-07735
CVE-2004-0175
RHSA-2005:074
RHSA-2005:106
RHSA-2005:165
RHSA-2005:562
RHSA-2005:567
RHSA-2005_074
RHSA-2005_106
RHSA-2005_165
RHSA-2005_562
RHSA-2005_567

Produtos afetados

Alt Linux
Openssh
Red Hat
Rsh
Rsh-Server