VDB
DEBIAN-CVE-2006-0225
DEBIAN-CVE-2006-0225
PUBLISHED
CVSS 9.300000190734863 CRITICAL
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | openssh | 0, 0, 0 |
| Debian:11 | openssh | 0, 0, 0 |
| Debian:14 | dropbear | 0, 0, 0 |
| Debian:12 | openssh | 0, 0, 0 |
| Debian:14 | openssh | 0, 0, 0 |
| Debian:11 | dropbear | 0, 0, 0 |
| Debian:13 | dropbear | 0, 0, 0 |
| Debian:12 | dropbear | 0, 0, 0 |
Exploit Intelligence
- security.html (github-poc)
Timeline
- Jan 25, 2006 CVE Published
- Apr 28, 2026 CVE Updated