CVEvulnerability

CVE-2005-4533

7.5 HIGH Published 2005-12-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.

Affected configurations

• scponly scponly 2.0 • scponly scponly 2.1 • scponly scponly 3.0 • scponly scponly 3.5 • scponly scponly 3.8 • scponly scponly 3.9 • scponly scponly 3.11 • scponly scponly 4.1

References