CVE-2006-0225

Published: Jan 25, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.

Affected (33)

Products: Openbsd: Openssh

Openbsd

1 product

Openssh

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 3.0.1
Openbsd Openssh	Version 3.0.1p1
Openbsd Openssh	Version 3.0.2
Openbsd Openssh	Version 3.0.2p1
Openbsd Openssh	Version 3.0
Openbsd Openssh	Version 3.0p1
Openbsd Openssh	Version 3.1
Openbsd Openssh	Version 3.1p1
Openbsd Openssh	Version 3.2.2p1
Openbsd Openssh	Version 3.2.3p1
Openbsd Openssh	Version 3.2
Openbsd Openssh	Version 3.3
Openbsd Openssh	Version 3.3p1
Openbsd Openssh	Version 3.4
Openbsd Openssh	Version 3.4p1
Openbsd Openssh	Version 3.5
Openbsd Openssh	Version 3.5p1
Openbsd Openssh	Version 3.6.1
Openbsd Openssh	Version 3.6.1p1
Openbsd Openssh	Version 3.6.1p2
Openbsd Openssh	Version 3.6
Openbsd Openssh	Version 3.7.1
Openbsd Openssh	Version 3.7.1p2
Openbsd Openssh	Version 3.7
Openbsd Openssh	Version 3.8.1
Openbsd Openssh	Version 3.8.1p1
Openbsd Openssh	Version 3.8
Openbsd Openssh	Version 3.9.1
Openbsd Openssh	Version 3.9.1p1
Openbsd Openssh	Version 3.9
Openbsd Openssh	Version 4.0p1
Openbsd Openssh	Version 4.1p1
Openbsd Openssh	Version 4.2p1

References (128)

ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch (unsafe URL)

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc (unsafe URL)

Source: secalert@redhat.com

http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=305214

Source: secalert@redhat.com

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: secalert@redhat.com

http://secunia.com/advisories/18579

Source: secalert@redhat.com

http://secunia.com/advisories/18595

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18650

Source: secalert@redhat.com

http://secunia.com/advisories/18736

Source: secalert@redhat.com

http://secunia.com/advisories/18798

Source: secalert@redhat.com

http://secunia.com/advisories/18850

Source: secalert@redhat.com

http://secunia.com/advisories/18910

Source: secalert@redhat.com

http://secunia.com/advisories/18964

Source: secalert@redhat.com

http://secunia.com/advisories/18969

Source: secalert@redhat.com

http://secunia.com/advisories/18970

Source: secalert@redhat.com

http://secunia.com/advisories/19159

Source: secalert@redhat.com

http://secunia.com/advisories/20723

Source: secalert@redhat.com

http://secunia.com/advisories/21129

Source: secalert@redhat.com

http://secunia.com/advisories/21262

Source: secalert@redhat.com

http://secunia.com/advisories/21492

Source: secalert@redhat.com

http://secunia.com/advisories/21724

Source: secalert@redhat.com

http://secunia.com/advisories/22196

Source: secalert@redhat.com

http://secunia.com/advisories/23241

Source: secalert@redhat.com

http://secunia.com/advisories/23340

Source: secalert@redhat.com

http://secunia.com/advisories/23680

Source: secalert@redhat.com

http://secunia.com/advisories/24479

Source: secalert@redhat.com

http://secunia.com/advisories/25607

Source: secalert@redhat.com

http://secunia.com/advisories/25936

Source: secalert@redhat.com

http://securityreason.com/securityalert/462

Source: secalert@redhat.com

http://securitytracker.com/id?1015540

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:034

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_08_openssh.html

Source: secalert@redhat.com

http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html

Source: secalert@redhat.com

http://www.osvdb.org/22692

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0044.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0298.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0698.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/425397/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/16369

Source: secalert@redhat.com

http://www.trustix.org/errata/2006/0004

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-255-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: secalert@redhat.com

US Government Resource

http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html

Source: secalert@redhat.com

http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/0306

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/2490

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4869

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/0930

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2120

Source: secalert@redhat.com

http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688

Source: secalert@redhat.com

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/24305

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962

Source: secalert@redhat.com

ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch (unsafe URL)