Scponly: >> Scponly >> 2.1 Security Vulnerabilities
Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.
CVSS Score
7.5
EPSS Score
0.006
Published
2005-12-28
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
CVSS Score
7.5
EPSS Score
0.007
Published
2005-01-10