2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2004-0175" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2004-08-18T04:00:00.000" ,
"lastModified" : "2017-10-11T01:29:22.200" ,
"vulnStatus" : "Modified" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992."
} ,
{
"lang" : "es" ,
"value" : "Vulnerabilidad de atravesamiento de directorios en scp de OpenSSH anteriores a 3.4p1 permite a servidores remotos maliciosos sobreescribir ficheros de su eleccion."
}
] ,
"vendorComments" : [
{
"organization" : "Red Hat" ,
"comment" : "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch." ,
"lastModified" : "2007-03-14T00:00:00"
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 4.3
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-22"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "580008AC-2667-4708-8F7E-D70416A460EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E05D8E86-EC01-4589-B372-4DEB7845C81F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "764AD252-CA2F-4A87-BCAA-7747E8C410E0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "269BB9F7-55E5-4CB3-8429-C37C7132799F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C6E6F639-31A0-4026-B6D4-51BA79FB1D20"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0211BCE3-0DED-40BA-8A21-1A97B91F71C7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5AD7BB30-AC79-4153-852C-1053DCF4DE53"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9039BE91-AF0A-41E7-8F9F-15375890E120"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08BCB2EA-DF9D-4853-805B-29FA6274E2B7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0F93417F-2498-4576-9F5D-B59F77D39669"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AF3AB42C-B614-4746-99AD-E94140D91BF3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "458167E5-9BC2-40BE-AC8A-9761A4F19494"
}
]
}
]
}
] ,
"references" : [
{
"url" : "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000831" ,
"source" : "cve@mitre.org"
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/17135" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://secunia.com/advisories/19243" ,
"source" : "cve@mitre.org"
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.ciac.org/ciac/bulletins/o-212.shtml" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.juniper.net/support/security/alerts/adv59739.txt" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:100" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:191" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.novell.com/linux/security/advisories/2004_09_kernel.html" ,
"source" : "cve@mitre.org"
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://www.osvdb.org/9550" ,
"source" : "cve@mitre.org"
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-074.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-106.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-165.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-481.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-495.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-562.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-567.html" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.securityfocus.com/bid/9986" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/16323" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184" ,
"source" : "cve@mitre.org"
}
]
}
