Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
scponly unison 命令执行漏洞
Vulnerability Description
scponlyc是一个仅为远程用户提供读、写权限而不提供执行权限的工具。 scponly 4.0之前版本中的unison存在任意命令执行漏洞。 由于无法正确限制可执行的程序,使得远程认证的用户可通过-rshcmd或-sshcmd标记,绕过所设置的访问限制,执行任意程序。
CVSS Information
N/A
Vulnerability Type
N/A