Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1162
security
vulnerability
unison
scponly
remote access restrictions
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.3%
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
Related
ubuntucve
ubuntucve
CVE-2004-1162
2005-01-10 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200412-01 (scponly)
2008-09-24 00:00:00
FreeBSD Ports: rssh
2008-09-04 00:00:00
nessus
nessus
gentoo
gentoo
rssh, scponly: Unrestricted command execution
2004-12-03 00:00:00
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.3%
Related for CVE-2004-1162