openssh:
CVE-2006-0225: scp (as does rcp, on which it is based) invoked a
subshell to perform local to local, and remote to remote copy
operations. This subshell exposed filenames to shell expansion
twice; allowing a local attacker to create filenames containing
shell metacharacters that, if matched by a wildcard, could lead
to execution of attacker-specified commands with the privilege of
the user running scp.
For more info:
Announce: OpenSSH 4.3 released
http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=113879773216803&w=2
CVE-2006-0225
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0225
-----
All openssh users should:
# scribe update
# cast -c openssh
or
# scribe update
# sorcery queue-security
# cast --queue
--
Ladislav Hagara
|
