CVE-2005-4533

Summary

Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/18223
• http://www.securityfocus.com/bid/16051
• http://secunia.com/advisories/18236
• http://sublimation.org/scponly/#relnotes
• http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23875

References

• http://secunia.com/advisories/18223
• http://www.securityfocus.com/bid/16051
• http://secunia.com/advisories/18236
• http://sublimation.org/scponly/#relnotes
• http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23875

• ←Previous
• Next→