| Package | Affected versions | Patched versions |
|---|---|---|
| openssh | = 3.0= 3.0.1= 3.0.1p1= 3.0.2= 3.0.2p1= 3.0p1= 3.1= 3.1p1= 3.2= 3.2.2p1= 3.2.3p1= 3.3= 3.3p1= 3.4= 3.4p1= 3.5= 3.5p1= 3.6= 3.6.1= 3.6.1p1= 3.6.1p2= 3.7= 3.7.1= 3.7.1p2= 3.8= 3.8.1= 3.8.1p1= 3.9= 3.9.1= 3.9.1p1= 4.0p1= 4.1p1= 4.2p1 |
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free