CVE-2000-0992
MediumExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Risk Assessment
An attacker can overwrite arbitrary files on the victim's system, potentially leading to data loss or system compromise.
Recommendation
Update sshd to a version later than 1.2.xx or apply patches that fix the directory traversal vulnerability in scp.
Other vulnerabilities in sshd
See all- CVE-2000-0143Medium
The SSH protocol server (sshd) allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
- CVE-1999-0248High
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Original NVD description (English source)
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.