Lucene search

[email protected]CVE-2000-0992

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-0992

2001-01-2205:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0992

directory traversal

sshd 1.2.xx

remote scp server

overwrite files

dot attack.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.3%

JSON

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a … (dot dot) attack.

Affected configurations

NVD

Node

openbsdopensshMatch1.2

openbsdopensshMatch1.2.3

sshsshMatch1.2.14

sshsshMatch1.2.15

sshsshMatch1.2.16

sshsshMatch1.2.17

sshsshMatch1.2.18

sshsshMatch1.2.19

sshsshMatch1.2.20

sshsshMatch1.2.21

sshsshMatch1.2.22

sshsshMatch1.2.23

sshsshMatch1.2.24

sshsshMatch1.2.25

sshsshMatch1.2.26

sshsshMatch1.2.27

sshsshMatch1.2.28

sshsshMatch1.2.29

sshsshMatch1.2.30

sshsshMatch1.2.31

CPENameOperatorVersion
openbsd:opensshopenbsd openssheq1.2
openbsd:opensshopenbsd openssheq1.2.3
ssh:sshssheq1.2.14
ssh:sshssheq1.2.15
ssh:sshssheq1.2.16
ssh:sshssheq1.2.17
ssh:sshssheq1.2.18
ssh:sshssheq1.2.19
ssh:sshssheq1.2.20
ssh:sshssheq1.2.21

CPE	Name	Operator	Version
openbsd:openssh	openbsd openssh	eq	1.2
openbsd:openssh	openbsd openssh	eq	1.2.3
ssh:ssh	ssh	eq	1.2.14
ssh:ssh	ssh	eq	1.2.15
ssh:ssh	ssh	eq	1.2.16
ssh:ssh	ssh	eq	1.2.17
ssh:ssh	ssh	eq	1.2.18
ssh:ssh	ssh	eq	1.2.19
ssh:ssh	ssh	eq	1.2.20
ssh:ssh	ssh	eq	1.2.21