Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
| Software | From | Fixed in |
|---|---|---|
| openbsd / openssh | 3.0 | 3.0.x |
| openbsd / openssh | 3.0.1 | 3.0.1.x |
| openbsd / openssh | 3.0.1p1 | 3.0.1p1.x |
| openbsd / openssh | 3.0.2 | 3.0.2.x |
| openbsd / openssh | 3.0.2p1 | 3.0.2p1.x |
| openbsd / openssh | 3.0p1 | 3.0p1.x |
| openbsd / openssh | 3.1 | 3.1.x |
| openbsd / openssh | 3.1p1 | 3.1p1.x |
| openbsd / openssh | 3.2 | 3.2.x |
| openbsd / openssh | 3.2.2p1 | 3.2.2p1.x |
| openbsd / openssh | 3.2.3p1 | 3.2.3p1.x |
| openbsd / openssh | 3.3 | 3.3.x |
| openbsd / openssh | 3.3p1 | 3.3p1.x |
| openbsd / openssh | 3.4 | 3.4.x |
| openbsd / openssh | 3.4p1 | 3.4p1.x |