ISOMAN

CVE

CVE-2018-20685

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.

Severity
MEDIUM
CVSS
5.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/106531
  2. https://access.redhat.com/errata/RHSA-2019:3702
  3. https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
  4. https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/scp.c.diff?r1=1.197&r2=1.198&f=h
  5. https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2
  6. https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
  7. https://security.gentoo.org/glsa/201903-16
  8. https://security.gentoo.org/glsa/202007-53
  9. https://security.netapp.com/advisory/ntap-20190215-0001/
  10. https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
  11. https://usn.ubuntu.com/3885-1/
  12. https://www.debian.org/security/2019/dsa-4387
  13. https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
  14. https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
  15. http://www.securityfocus.com/bid/106531
  16. https://access.redhat.com/errata/RHSA-2019:3702
  17. https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
  18. https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/scp.c.diff?r1=1.197&r2=1.198&f=h
  19. https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2
  20. https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html