Bug#352254: scp shell metacharacter expansion

2006-02-10 Thread Adam D. Barratt
severity 352254 important merge 352254 349645 thanks Hi, On Fri, 2006-02-10 at 17:56 +, Niall Sheridan wrote: > Package: openssh > Version: 1:4.2p1-5 > > As per CVE-2006-0225, scp does not properly escape metacharacters when > doing local-local copying. > Most noticeable when you leave off t

Bug#352254: scp shell metacharacter expansion

2006-02-10 Thread Niall Sheridan
Package: openssh Version: 1:4.2p1-5 As per CVE-2006-0225, scp does not properly escape metacharacters when doing local-local copying. Most noticeable when you leave off the ':' of a hostname $ touch "\`rm -rf myfile\`" $ touch myfile $ ls -l total 0 -rw-r- 1 nsheridan eng 0 2006-02-09 17:4