CVE-2007-6415
Published: 25 January 2008
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as implemented by OpenSSH, with the -F and -o options.
Notes
| Author | Note |
|---|---|
| jdstrand | debdiff in bug needs more information |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
scponly Launchpad, Ubuntu, Debian |
dapper |
Released
(4.6-1etch1build0.6.06.1)
|
| edgy |
Ignored
(end of life, was needed)
|
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Ignored
(end of life, was needed)
|
|
| hardy |
Released
(4.6-1.2)
|
|
| intrepid |
Released
(4.6-1.2)
|
|
| jaunty |
Released
(4.6-1.2)
|
|
| upstream |
Released
(4.6-1.2)
|