[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#352254: scp shell metacharacter expansion



severity 352254 important
merge 352254 349645
thanks

Hi,

On Fri, 2006-02-10 at 17:56 +0000, Niall Sheridan wrote:
> Package: openssh
> Version: 1:4.2p1-5
> 
> As per CVE-2006-0225, scp does not properly escape metacharacters when
> doing local-local copying.
> Most noticeable when you leave off the ':' of a hostname
[...]
> I swiped the patch from
> http://bugzilla.mindrot.org/show_bug.cgi?id=1094 and merged it.

This looks like a duplicate of #349645; merging.

Regards,

Adam




Reply to: