Bug#327019: ssh: scp allows remote execution of shell commands when semicolon is used in filename

[Adam D. Barratt]

On Wednesday, September 07, 2005 6:36 AM, Alexey Feldgendler
<[EMAIL PROTECTED]> wrote:

> Package: ssh
> Version: 1:3.8.1p1-8.sarge.4
> Severity: critical
>
> Here is my testcase:
>
> $ scp remotehost@';uname -a'

scp [EMAIL PROTECTED]:';uname -a', surely?

Regards,

Adam



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]