Note:
This project will be discontinued after December 13, 2021. [more]
2019-01-10
In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
Navigation
Patch data:
Patched area:
(on by default)
Patched area: