PT-2003-1206 · Scponly · Scponly

Published 2003-04-22 · Updated 2008-09-05 · CVE-2002-1469

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions scponly (affected versions not specified)

Description The issue is related to the improper verification of the path when finding the scp or sftp-server programs. This could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-1469

Affected Products

Scponly

References · 6

• 🔥 http://securityfocus.com/bid/5526 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/288245 · Exploit
• 🔥 https://exploit-db.com/exploits/21732 · Exploit
• http://iss.net/security_center/static/9913.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1469 · Security Note
• http://sublimation.org/scponly · Note