CVEvulnerability

CVE-2000-0992

5.0 MEDIUM Published 2000-12-19 Modified 2026-09-23 Official page ↗
Status
Modified
Published
2000-12-19
Last modified
2026-09-23
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.

Affected configurations

• openbsd openssh 1.2 • openbsd openssh 1.2.3 • ssh ssh 1.2.14 • ssh ssh 1.2.15 • ssh ssh 1.2.16 • ssh ssh 1.2.17 • ssh ssh 1.2.18 • ssh ssh 1.2.19 • ssh ssh 1.2.20 • ssh ssh 1.2.21 • ssh ssh 1.2.22 • ssh ssh 1.2.23 • ssh ssh 1.2.24 • ssh ssh 1.2.25 • ssh ssh 1.2.26 • ssh ssh 1.2.27 • ssh ssh 1.2.28 • ssh ssh 1.2.29 • ssh ssh 1.2.30 • ssh ssh 1.2.31

References