Unscored CVE-2001-0816 EUVD-2001-0800GHSA-6gpw-hxc4-7rm4

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass author…

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands.

References

IMNX-2001-70-034-01 vendor-advisory
RHSA-2001:154 vendor-advisory
CLSA-2001:431 vendor-advisory
20010918 OpenSSH: sftp & bypassing keypair auth restrictions mailing-list
openssh-sftp-bypass-restrictions(7634) vdb-entry
5536 vdb-entry