CVE-2005-4532 - CVE House
Back to Database
Status published High CVE-2005-4532

scponlyc in scponly 4.1 and earlier, when the operating system...

Vulnerability Description

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4532

Credits & Attribution

No credits recorded in the NVD database.

References

More from scponly

View All →
CVE-2007-6350
scponly 4.6 and earlier allows remote authenticated users to bypass...
High 8.5
CVE-2005-4533
Argument injection vulnerability in scponlyc in scponly 4.1 and earlier,...
High 7.5
CVE-2004-1162
The unison command in scponly before 4.0 does not properly...
High 7.5
CVE-2002-1469
scponly does not properly verify the path when finding the...
High 7.5

Affected Vendor

Affected Software

scponly
Vulnerable Versions:
3.1, 3.2, 3.3, 3.4, 3.6, 3.7, 3.8, 3.9, 3.11, 4.0, 4.1

Timeline

Official Publish: December 28th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.