tocsin

Debian/openssh: unknown

scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.

Action: Upgrade openssh to 1:4.3p2-1 or later.

Affected

introducedfixedlast affected
01:4.3p2-1-

Fixed versions

1:4.3p2-1

Sources

published · modified · JSON