Oval Definition:	oval:org.mitre.oval:def:10184
Revision Date: 2013-04-29 Version: 12 Title: Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992. Description: Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2004-0175 Platform(s): CentOS Linux 3 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section krb5-workstation is earlier than 0:1.2.7-47 OR krb5 is earlier than 0:1.2.7-47 OR rsh is earlier than 0:0.17-17.6 OR openssh-askpass is earlier than 0:3.6.1p2-33.30.4 OR krb5-libs is earlier than 0:1.2.7-47 OR rsh-server is earlier than 0:0.17-17.6 OR openssh-server is earlier than 0:3.6.1p2-33.30.4 OR openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.4 OR openssh is earlier than 0:3.6.1p2-33.30.4 OR krb5-server is earlier than 0:1.2.7-47 OR openssh-clients is earlier than 0:3.6.1p2-33.30.4 OR krb5-devel is earlier than 0:1.2.7-47 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section krb5-workstation is earlier than 0:1.3.4-17 OR krb5 is earlier than 0:1.3.4-17 OR rsh is earlier than 0:0.17-25.3 OR krb5-libs is earlier than 0:1.3.4-17 OR krb5-server is earlier than 0:1.3.4-17 OR rsh-server is earlier than 0:0.17-25.3 OR krb5-devel is earlier than 0:1.3.4-17
BACK