CVE-2006-0225
openbsd openssh: no CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days.
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openbsd:openssh
References
- ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch
- ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
- http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability
- http://docs.info.apple.com/article.html?artnum=305214
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112