Lucene search

Ubuntu.comUB:CVE-2004-1162

HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-1162

2005-01-1000:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.3%

JSON

The unison command in scponly before 4.0 does not properly restrict
programs that can be run, which could allow remote authenticated users to
bypass intended access restrictions and execute arbitrary programs via the
(1) -rshcmd or (2) -sshcmd flags.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchscponly< 4.6-1UNKNOWN
ubuntu6.10noarchscponly< 4.6-1UNKNOWN
ubuntu7.04noarchscponly< 4.6-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	scponly	< 4.6-1	UNKNOWN
ubuntu	6.10	noarch	scponly	< 4.6-1	UNKNOWN
ubuntu	7.04	noarch	scponly	< 4.6-1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2004-1162

nvd.nist.gov/vuln/detail/CVE-2004-1162

security-tracker.debian.org/tracker/CVE-2004-1162

www.cve.org/CVERecord?id=CVE-2004-1162

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.3%

JSON

Related for UB:CVE-2004-1162