PT-2004-1115 · Openssh · Scp

Jason Wies · Published 2004-12-03 · Updated 2016-10-18 · CVE-2004-1161

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions rssh versions 2.2.2 and earlier scponly versions prior to 4.0

Description The issue allows remote authenticated users to bypass intended access restrictions. This can be exploited via rdist -P, rsync, or scp -S commands. Multiple vulnerabilities in the scponly package can lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For rssh versions 2.2.2 and earlier, consider updating to a version later than 2.2.2 to resolve the issue. For scponly versions prior to 4.0, update to version 4.0 or later to fix the vulnerabilities. As a temporary workaround, consider restricting access to the rdist -P, rsync, and scp -S commands until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-09469

CVE-2004-1161

Affected Products

Scp

References · 8

• 🔥 https://exploit-db.com/exploits/24795 · Exploit
• 🔥 http://securityfocus.com/bid/11792 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1161 · Security Note
• https://bdu.fstec.ru/vul/2015-09469 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200412-01.xml · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110581113814623&w=2 · Note
• http://marc.info/?l=bugtraq&m=110202047507273&w=2 · Note
• http://security.gentoo.org/glsa/glsa-200412-01.xml · Note