Security Advisory
CVE-2006-0225
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.