Vulnerability DatabaseCVE-2006-0225
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2006-0225
January 25, 2006
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
Related Resources (65)
http://secunia.com/advisories/18595
http://www.trustix.org/errata/2006/0004
http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm
http://www.vupen.com/english/advisories/2007/0930
http://www.vupen.com/english/advisories/2007/2120
http://www.redhat.com/support/errata/RHSA-2006-0698.html
http://secunia.com/advisories/22196
http://secunia.com/advisories/24479
https://people.canonical.com/~ubuntu-security/cve/CVE-2006-0225
http://secunia.com/advisories/25607
http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/24305
http://secunia.com/advisories/21724
http://secunia.com/advisories/21262
http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability
http://securitytracker.com/id?1015540
http://secunia.com/advisories/23241
http://secunia.com/advisories/18910
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112
http://secunia.com/advisories/21492
http://secunia.com/advisories/25936
http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm
http://secunia.com/advisories/18579
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://secunia.com/advisories/19159
http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688
http://secunia.com/advisories/18798
http://secunia.com/advisories/20723
http://secunia.com/advisories/21129
http://www.redhat.com/support/errata/RHSA-2006-0298.html
http://secunia.com/advisories/18970
http://secunia.com/advisories/23340
http://www.ubuntu.com/usn/usn-255-1
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
http://www.vupen.com/english/advisories/2006/0306
http://www.vupen.com/english/advisories/2006/2490
http://www.osvdb.org/22692
http://www.securityfocus.com/archive/1/425397/100/0/threaded
http://secunia.com/advisories/23680
http://www.novell.com/linux/security/advisories/2006_08_openssh.html
http://docs.info.apple.com/article.html?artnum=305214
http://secunia.com/advisories/18850
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138
http://secunia.com/advisories/18736
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962
http://secunia.com/advisories/18969
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
http://securityreason.com/securityalert/462
http://www.mandriva.com/security/advisories?name=MDKSA-2006:034
http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1
http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751
http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802
http://www.redhat.com/support/errata/RHSA-2006-0044.html
http://secunia.com/advisories/18650
http://www.vupen.com/english/advisories/2006/4869
http://www.securityfocus.com/bid/16369
http://secunia.com/advisories/18964
Do you need more information?
Contact Us
CVSS v4
Base Score:
5.1
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW
CVSS v2
Base Score:
4.6
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
EPSS
Base Score:
0.13