Описание
scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.
Ссылки
- ExploitPatchVendor Advisory
- PatchVendor Advisory
- ExploitPatchVendor Advisory
- ExploitPatchVendor Advisory
- PatchVendor Advisory
- ExploitPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:scponly:scponly:2.3:*:*:*:*:*:*:*
cpe:2.3:a:scponly:scponly:2.4:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.07531
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
больше 22 лет назад
scponly does not properly verify the path when finding the (1) scp or ...
github
больше 3 лет назад
scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.
EPSS
Процентиль: 91%
0.07531
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other