Red Hat Security AdvisoryRHSA-2006:0044
openssh security update
Released 2006-03-07 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openssh-3.9p1-8.RHEL4.12, openssh-3.9p1-8.RHEL4.12.i386, openssh-3.9p1-8.RHEL4.12.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 openssh-3.9p1-8.RHEL4.12, openssh-3.9p1-8.RHEL4.12.i386, openssh-askpass-3.9p1-8.RHEL4.12 +7
- Red Hat Enterprise Linux ES version 4 openssh-3.9p1-8.RHEL4.12, openssh-3.9p1-8.RHEL4.12.i386, openssh-3.9p1-8.RHEL4.12.ia64 +12
- Red Hat Enterprise Linux WS version 4 openssh-3.9p1-8.RHEL4.12, openssh-3.9p1-8.RHEL4.12.i386, openssh-3.9p1-8.RHEL4.12.ia64 +12
Fixes 1 record
Priority LOW 22
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.0047 · Published 2006-01-25 · Fixed
