Vulnerability in Openbsd Openssh

CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.

EPSS: 0.057 (92.2th percentile) — read the EPSS interpretation.

Affected products

Openbsd Openssh — versions 1.2, 1.2.3
Ssh — versions 1.2.14, 1.2.15, 1.2.16
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)