CNCVE编号:CNCVE-20000992 CVE编号:CVE-2000-0992 安全级别:中 漏洞中文描述: sshd 1.2.xx的scp中存在目录遍历漏洞,这导致远程恶意scp服务器通过“..”攻击来覆盖任意文件。 漏洞英文描述: Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. 漏洞参考: BUGTRAQ:20000930 scp file transfer hole | URL:http://archives.neohapsis.com/archives/bugtraq/2000-09/0359.html | MANDRAKE:MDKSA-2000:057 | BID:1742 | URL:http://www.securityfocus.com/bid/1742 系统类型:其他 漏洞类型:设计错误