Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2004-0175

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenSSH是一种开放源码的SSH协议的实现,初始版本用于OpenBSD平台,现在已经被移植到多种Unix/Linux类操作系统下。 OpenSSH scp客户端不正确处理部分文件名中的特殊字符,远程恶意服务器可以运行scp客户端用户权限在工作目录外建立恶意文件。 目前没有详细漏洞细节提供。

AI Predicted 7.5 Difficulty: Easy EPSS 1.82% · P77
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2004-0175

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
OpenSSH SCP客户端文件破坏漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenSSH是一种开放源码的SSH协议的实现,初始版本用于OpenBSD平台,现在已经被移植到多种Unix/Linux类操作系统下。 OpenSSH scp客户端不正确处理部分文件名中的特殊字符,远程恶意服务器可以运行scp客户端用户权限在工作目录外建立恶意文件。 目前没有详细漏洞细节提供。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2004-0175

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-0175

登录查看更多情报信息。

Vendor Advisories for CVE-2004-0175 (10)

Other References for CVE-2004-0175 (11)

Same Patch Batch · n/a · 2004-06-03 · 32 CVEs total

CVE-2004-0502 Microsoft Outlook 2003可预测文件位置弱点
CVE-2004-0523 MIT Kerberos 5 KRB5_AName_To_Localname多个principal名缓冲区溢出漏洞
CVE-2004-0521 SquirrelMail未明SQL注入漏洞
CVE-2004-0520 SquirrelMail Email头HTML注入漏洞
CVE-2004-0519 SquirrelMail文件夹名称跨站脚本漏洞
CVE-2004-0518 Mac OS X 漏洞Mac OS X AppleFileServer漏洞
CVE-2004-0517 Mac OS X漏洞
CVE-2004-0516 Mac OS X漏洞
CVE-2004-0515 Mac OS X漏洞
CVE-2004-0514 Mac OS X漏洞
CVE-2004-0513 Apple Mac OS X未明安全漏洞
CVE-2004-0507 Ethereal协议解析器多个安全漏洞
CVE-2004-0506 Ethereal协议解析器多个安全漏洞
CVE-2004-0505 Ethereal协议解析器多个安全漏洞
CVE-2004-0504 Ethereal协议解析器多个安全漏洞
CVE-2004-0503 Microsoft Outlook 2003媒体文件脚本执行漏洞
CVE-2003-0193 CatDoc XLSView本地不安全临时文件创建漏洞
CVE-2004-0501 Microsoft Outlook邮件客户端E-MAIL地址校验漏洞
CVE-2004-0490 cPanel的本地权限提升漏洞
CVE-2004-0487 Symantec Norton AntiVirus ActiveX控件远程代码执行漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2004-0175

No comments yet


Leave a comment