Unscored severity · published Dec 14, 2007
CVE-2007-6350
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3)…
–
CVSS
4.4%
EPSS
No
On KEV
Description
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Scponly · Scponly
through 4.6; 4.2; 4.3; 4.4; 4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6350
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6350
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=437148
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=201726
osvdb.org
http://osvdb.org/44137
scponly.cvs.sourceforge.net
http://scponly.cvs.sourceforge.net/scponly/scponly/SECURITY?view=markup
Vendor Advisory
http://secunia.com/advisories/28123
Vendor Advisory
http://secunia.com/advisories/28538
More from Scponly
–
CVE-2005-4532
scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a…
–
CVE-2005-4533
Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications…
–
CVE-2004-1162
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions…
–
CVE-2002-1469
scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading…