Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.47%
Published
Jan 25, 2006
Modified
Jun 16, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
Affected Products (33)
References (20)