PT-2004-1116 · Scponly · Scponly

Jason Wies · Published 2004-12-03 · Updated 2017-07-11 · CVE-2004-1162

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions scponly versions prior to 4.0

Description The issue allows remote authenticated users to bypass intended access restrictions and execute arbitrary programs. This could lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

Recommendations For scponly versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the scponly command and its associated flags, such as -rshcmd and -sshcmd, until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-09469

CVE-2004-1162

Affected Products

Scponly

References · 9

• 🔥 http://securityfocus.com/bid/11791 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1162 · Security Note
• https://bdu.fstec.ru/vul/2015-09469 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200412-01.xml · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110581113814623&w=2 · Note
• http://sublimation.org/scponly/#relnotes · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18362 · Note
• http://marc.info/?l=bugtraq&m=110202047507273&w=2 · Note
• http://security.gentoo.org/glsa/glsa-200412-01.xml · Note