Back to Database
Status published
High
CVE-2004-1162
The unison command in scponly before 4.0 does not properly...
Vulnerability Description
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1162
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml
- http://marc.info/?l=bugtraq&m=110581113814623&w=2
- http://marc.info/?l=bugtraq&m=110202047507273&w=2
- http://www.sublimation.org/scponly/#relnotes
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18362
- http://www.securityfocus.com/bid/11791
More from scponly
View All →CVE-2007-6350
scponly 4.6 and earlier allows remote authenticated users to bypass...
High
8.5
CVE-2005-4533
Argument injection vulnerability in scponlyc in scponly 4.1 and earlier,...
High
7.5
CVE-2005-4532
scponlyc in scponly 4.1 and earlier, when the operating system...
High
7.2
CVE-2002-1469
scponly does not properly verify the path when finding the...
High
7.5
Affected Vendor
scponly
View all reports →Affected Software
scponly, linux
Vulnerable Versions:
2.0, 2.1, 2.3, 2.4, 3.0, 3.5, 3.8, 3.9, 3.11
Timeline
Official Publish:
December 10th, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.