CVE-2004-0175

Published: Aug 18, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.

Affected (15)

Products: Openbsd: Openssh

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 3.0.1
Openbsd Openssh	Version 3.0.1p1
Openbsd Openssh	Version 3.0.2
Openbsd Openssh	Version 3.0.2p1
Openbsd Openssh	Version 3.0
Openbsd Openssh	Version 3.0p1
Openbsd Openssh	Version 3.1
Openbsd Openssh	Version 3.1p1
Openbsd Openssh	Version 3.2.2p1
Openbsd Openssh	Version 3.2.3p1
Openbsd Openssh	Version 3.2
Openbsd Openssh	Version 3.3
Openbsd Openssh	Version 3.3p1
Openbsd Openssh	Version 3.4
Openbsd Openssh	Version 3.4p1

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (42)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt (unsafe URL)

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000831

Source: cve@mitre.org

http://secunia.com/advisories/17135

Source: cve@mitre.org

http://secunia.com/advisories/19243

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/o-212.shtml

Source: cve@mitre.org

http://www.juniper.net/support/security/alerts/adv59739.txt

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:100

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:191

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_09_kernel.html

Source: cve@mitre.org

http://www.osvdb.org/9550

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-074.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-106.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-165.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-481.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-495.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-562.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-567.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/9986

Source: cve@mitre.org

PatchVendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16323

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000831

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17135

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19243

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/o-212.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.juniper.net/support/security/alerts/adv59739.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:100

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:191

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2004_09_kernel.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/9550

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-074.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-106.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-165.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-481.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-495.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-562.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-567.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9986

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16323

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.