{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2006-0225", "ASSIGNER": "secalert@redhat.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "n/a", "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_affected": "=", "version_value": "n/a" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc", "refsource": "MISC", "name": "ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc" }, { "url": "http://secunia.com/advisories/21262", "refsource": "MISC", "name": "http://secunia.com/advisories/21262" }, { "url": "http://secunia.com/advisories/23340", "refsource": "MISC", "name": "http://secunia.com/advisories/23340" }, { "url": "http://secunia.com/advisories/23680", "refsource": "MISC", "name": "http://secunia.com/advisories/23680" }, { "url": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html", "refsource": "MISC", "name": "http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html" }, { "url": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html", "refsource": "MISC", "name": "http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html" }, { "url": "http://www.securityfocus.com/archive/1/425397/100/0/threaded", "refsource": "MISC", "name": "http://www.securityfocus.com/archive/1/425397/100/0/threaded" }, { "url": "http://docs.info.apple.com/article.html?artnum=305214", "refsource": "MISC", "name": "http://docs.info.apple.com/article.html?artnum=305214" }, { "url": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html", "refsource": "MISC", "name": "http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html" }, { "url": "http://secunia.com/advisories/24479", "refsource": "MISC", "name": "http://secunia.com/advisories/24479" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html", "refsource": "MISC", "name": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html" }, { "url": "http://www.vupen.com/english/advisories/2007/0930", "refsource": "MISC", "name": "http://www.vupen.com/english/advisories/2007/0930" }, { "url": "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch", "refsource": "MISC", "name": "ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch" }, { "url": "http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability", "refsource": "MISC", "name": "http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability" }, { "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112", "refsource": "MISC", "name": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112" }, { "url": "http://secunia.com/advisories/18579", "refsource": "MISC", "name": "http://secunia.com/advisories/18579" }, { "url": "http://secunia.com/advisories/18595", "refsource": "MISC", "name": "http://secunia.com/advisories/18595" }, { "url": "http://secunia.com/advisories/18650", "refsource": "MISC", "name": "http://secunia.com/advisories/18650" }, { "url": "http://secunia.com/advisories/18736", "refsource": "MISC", "name": "http://secunia.com/advisories/18736" }, { "url": "http://secunia.com/advisories/18798", "refsource": "MISC", "name": "http://secunia.com/advisories/18798" }, { "url": "http://secunia.com/advisories/18850", "refsource": "MISC", "name": "http://secunia.com/advisories/18850" }, { "url": "http://secunia.com/advisories/18910", "refsource": "MISC", "name": "http://secunia.com/advisories/18910" }, { "url": "http://secunia.com/advisories/18964", "refsource": "MISC", "name": "http://secunia.com/advisories/18964" }, { "url": "http://secunia.com/advisories/18969", "refsource": "MISC", "name": "http://secunia.com/advisories/18969" }, { "url": "http://secunia.com/advisories/18970", "refsource": "MISC", "name": "http://secunia.com/advisories/18970" }, { "url": "http://secunia.com/advisories/19159", "refsource": "MISC", "name": "http://secunia.com/advisories/19159" }, { "url": "http://secunia.com/advisories/20723", "refsource": "MISC", "name": "http://secunia.com/advisories/20723" }, { "url": "http://secunia.com/advisories/21129", "refsource": "MISC", "name": "http://secunia.com/advisories/21129" }, { "url": "http://secunia.com/advisories/21492", "refsource": "MISC", "name": "http://secunia.com/advisories/21492" }, { "url": "http://secunia.com/advisories/21724", "refsource": "MISC", "name": "http://secunia.com/advisories/21724" }, { "url": "http://secunia.com/advisories/22196", "refsource": "MISC", "name": "http://secunia.com/advisories/22196" }, { "url": "http://secunia.com/advisories/23241", "refsource": "MISC", "name": "http://secunia.com/advisories/23241" }, { "url": "http://secunia.com/advisories/25607", "refsource": "MISC", "name": "http://secunia.com/advisories/25607" }, { "url": "http://secunia.com/advisories/25936", "refsource": "MISC", "name": "http://secunia.com/advisories/25936" }, { "url": "http://securityreason.com/securityalert/462", "refsource": "MISC", "name": "http://securityreason.com/securityalert/462" }, { "url": "http://securitytracker.com/id?1015540", "refsource": "MISC", "name": "http://securitytracker.com/id?1015540" }, { "url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802", "refsource": "MISC", "name": "http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.425802" }, { "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1", "refsource": "MISC", "name": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1" }, { "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm", "refsource": "MISC", "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-158.htm" }, { "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm", "refsource": "MISC", "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-174.htm" }, { "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm", "refsource": "MISC", "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm" }, { "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm", "refsource": "MISC", "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-246.htm" }, { "url": "http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml", "refsource": "MISC", "name": "http://www.gentoo.org/security/en/glsa/glsa-200602-11.xml" }, { "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:034", "refsource": "MISC", "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:034" }, { "url": "http://www.novell.com/linux/security/advisories/2006_08_openssh.html", "refsource": "MISC", "name": "http://www.novell.com/linux/security/advisories/2006_08_openssh.html" }, { "url": "http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html", "refsource": "MISC", "name": "http://www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.html" }, { "url": "http://www.osvdb.org/22692", "refsource": "MISC", "name": "http://www.osvdb.org/22692" }, { "url": "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html", "refsource": "MISC", "name": "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.html" }, { "url": "http://www.redhat.com/support/errata/RHSA-2006-0044.html", "refsource": "MISC", "name": "http://www.redhat.com/support/errata/RHSA-2006-0044.html" }, { "url": "http://www.redhat.com/support/errata/RHSA-2006-0298.html", "refsource": "MISC", "name": "http://www.redhat.com/support/errata/RHSA-2006-0298.html" }, { "url": "http://www.redhat.com/support/errata/RHSA-2006-0698.html", "refsource": "MISC", "name": "http://www.redhat.com/support/errata/RHSA-2006-0698.html" }, { "url": "http://www.securityfocus.com/bid/16369", "refsource": "MISC", "name": "http://www.securityfocus.com/bid/16369" }, { "url": "http://www.trustix.org/errata/2006/0004", "refsource": "MISC", "name": "http://www.trustix.org/errata/2006/0004" }, { "url": "http://www.ubuntu.com/usn/usn-255-1", "refsource": "MISC", "name": "http://www.ubuntu.com/usn/usn-255-1" }, { "url": "http://www.vupen.com/english/advisories/2006/0306", "refsource": "MISC", "name": "http://www.vupen.com/english/advisories/2006/0306" }, { "url": "http://www.vupen.com/english/advisories/2006/2490", "refsource": "MISC", "name": "http://www.vupen.com/english/advisories/2006/2490" }, { "url": "http://www.vupen.com/english/advisories/2006/4869", "refsource": "MISC", "name": "http://www.vupen.com/english/advisories/2006/4869" }, { "url": "http://www.vupen.com/english/advisories/2007/2120", "refsource": "MISC", "name": "http://www.vupen.com/english/advisories/2007/2120" }, { "url": "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688", "refsource": "MISC", "name": "http://www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.html#MH00688" }, { "url": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751", "refsource": "MISC", "name": "http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2751" }, { "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026", "refsource": "MISC", "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174026" }, { "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24305", "refsource": "MISC", "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24305" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138", "refsource": "MISC", "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962", "refsource": "MISC", "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962" } ] } }