CVE-2006-0225

Description

scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch
• ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
• http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability
• http://docs.info.apple.com/article.html?artnum=305214
• http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html