NVD

Id
58965  
Name
CVE-2006-0225  
Description
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-25  
Modified Date
2016-11-18  
Seq
2006-0225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302790 58965 CVE-2006-0225 20060212 [3.8] 005: SECURITY FIX: February 12, 2006  View
302791 58965 CVE-2006-0225 20060703-01-P  View
302792 58965 CVE-2006-0225 http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability  View
302793 58965 CVE-2006-0225 http://docs.info.apple.com/article.html?artnum=305214  View
302794 58965 CVE-2006-0225 SSRT061267  View
302795 58965 CVE-2006-0225 APPLE-SA-2007-03-13  View
302796 58965 CVE-2006-0225 oval:org.mitre.oval:def:1138  View
302797 58965 CVE-2006-0225 oval:org.mitre.oval:def:9962  View
302798 58965 CVE-2006-0225 462  View
302799 58965 CVE-2006-0225 1015540  View
302800 58965 CVE-2006-0225 SSA:2006-045-06  View
302801 58965 CVE-2006-0225 102961  View
302802 58965 CVE-2006-0225 http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm  View
302803 58965 CVE-2006-0225 http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm  View
302804 58965 CVE-2006-0225 http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm  View
302805 58965 CVE-2006-0225 http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm  View
302806 58965 CVE-2006-0225 GLSA-200602-11  View
302807 58965 CVE-2006-0225 MDKSA-2006:034  View
302808 58965 CVE-2006-0225 SUSE-SA:2006:008  View
302809 58965 CVE-2006-0225 OpenPKG-SA-2006.003  View
302810 58965 CVE-2006-0225 FEDORA-2006-056  View
302811 58965 CVE-2006-0225 RHSA-2006:0044  View
302812 58965 CVE-2006-0225 RHSA-2006:0298  View
302813 58965 CVE-2006-0225 RHSA-2006:0698  View
302814 58965 CVE-2006-0225 FLSA-2006:168935  View
302815 58965 CVE-2006-0225 16369  View
302816 58965 CVE-2006-0225 2006-0004  View
302817 58965 CVE-2006-0225 USN-255-1  View
302818 58965 CVE-2006-0225 TA07-072A  View
302819 58965 CVE-2006-0225 http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html  View
302820 58965 CVE-2006-0225 http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html  View
302821 58965 CVE-2006-0225 ADV-2006-0306  View
302822 58965 CVE-2006-0225 ADV-2006-2490  View
302823 58965 CVE-2006-0225 ADV-2006-4869  View
302824 58965 CVE-2006-0225 ADV-2007-0930  View
302825 58965 CVE-2006-0225 ADV-2007-2120  View
302826 58965 CVE-2006-0225 http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688  View
302827 58965 CVE-2006-0225 http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751  View
302828 58965 CVE-2006-0225 openssh-scp-command-execution(24305)  View
302829 58965 CVE-2006-0225 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57873 JVNDB-2006-000069 OpenSSH の scp コマンド におけるシェルコマンドを挿入される脆弱性 OpenSSH に含まれる scp コマンドには、ローカルホストからローカルホスト、あるいはリモートホストからリモートホストにファイルをコピーする際、ファイル名にメタキャラクタあるいはスペースが含まれているファイルを処理した場合に、system() 関数によるサブシェルが二回呼び出されてしまう脆弱性が存在します。 CVE-2006-0225 16327 CVE-2006-0225 58965 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000069.html 2006-01-24 2009-07-01 View