CVE-2007-6350

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1)…

published December 14, 2007

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04362 · 91.1th percentile
Published
2007-12-14T20:00Z
EPSS history
Timeline
  • 14 DEC 20:00Z
    scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1)…
    cvelistv5