sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [SMGLSA-2006:4] openssh vulnerability

From: ladislav.hagara AT unob.cz
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] [SMGLSA-2006:4] openssh vulnerability
Date: Wed, 1 Feb 2006 17:29:40 +0100 (CET)

openssh:
CVE-2006-0225: scp (as does rcp, on which it is based) invoked a
subshell to perform local to local, and remote to remote copy
operations. This subshell exposed filenames to shell expansion
twice; allowing a local attacker to create filenames containing
shell metacharacters that, if matched by a wildcard, could lead
to execution of attacker-specified commands with the privilege of
the user running scp.

For more info:
Announce: OpenSSH 4.3 released
http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=113879773216803&w=2
CVE-2006-0225
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0225

-----
All openssh users should:
# scribe update
# cast -c openssh

or

# scribe update
# sorcery queue-security
# cast --queue

--
Ladislav Hagara

[SM-Security] [SMGLSA-2006:4] openssh vulnerability, ladislav . hagara, 02/01/2006