Security Advisory

CVE-2004-1162

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-12-10 05:00:00
Last updated 2024-08-08 00:39:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.