CVE:CVE-2000-0992
CNNVD:CNNVD-200012-108
sshd 1.2.xx版本的scp存在目录遍历漏洞。远程恶意scp服务器借助 .. (点 点)攻击改写任意文件。
solution:Upgrade openbsd openssh to a higher version than 1.2,1.2.3,and avoid the version 1.2,1.2.3; Upgrade ssh ssh to a higher version than 1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,and avoid the version 1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31