CVE-2000-0992 Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
MediumCVSS 5.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openssh(Debian:12) | < 1:3.9p1-1 | 1:3.9p1-1 |
| debian/openssh(Debian:13) | < 1:3.9p1-1 | 1:3.9p1-1 |
| debian/openssh(Debian:14) | < 1:3.9p1-1 | 1:3.9p1-1 |
| OpenBSD openssh | = 1.2 | No fix listed |
| OpenBSD openssh | = 1.2.3 | No fix listed |
| ssh | = 1.2.14 | No fix listed |
| ssh | = 1.2.15 | No fix listed |
| ssh | = 1.2.16 | No fix listed |
| ssh | = 1.2.17 | No fix listed |
| ssh | = 1.2.18 | No fix listed |
| ssh | = 1.2.19 | No fix listed |
| ssh | = 1.2.20 | No fix listed |
| ssh | = 1.2.21 | No fix listed |
| ssh | = 1.2.22 | No fix listed |
| ssh | = 1.2.23 | No fix listed |
| ssh | = 1.2.24 | No fix listed |
| ssh | = 1.2.25 | No fix listed |
| ssh | = 1.2.26 | No fix listed |
| ssh | = 1.2.27 | No fix listed |
| ssh | = 1.2.28 | No fix listed |
| ssh | = 1.2.29 | No fix listed |
| ssh | = 1.2.30 | No fix listed |
| ssh | = 1.2.31 | No fix listed |
References
- Debian Security Tracker CVE-2000-0992 vendor-advisory
- bugs.debian.org issue-tracking
- scp-overwrite-files(5312) vdb-entry
- MDKSA-2000:057 vendor-advisory
- 20000930 scp file transfer hole exploit mailing-list vendor-advisory
- 1742 exploit patch vdb-entry vendor-advisory