Beveiligingsadvies

CVE-2002-1469

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2004-09-01 04:00:00
Laatst bijgewerkt 2024-08-08 03:26:28
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.