CVE-2000-0992: Medium severity SSH ssh vulnerability
Published Dec 19, 2000
·Updated
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Affected Software
20 affected components
SSH ssh=1.2.21
SSH ssh=1.2.15
SSH ssh=1.2.14
SSH ssh=1.2.19
SSH ssh=1.2.31
SSH ssh=1.2.24
SSH ssh=1.2.18
OpenBSD OpenSSH=1.2.3
SSH ssh=1.2.20
OpenBSD OpenSSH=1.2
SSH ssh=1.2.25
SSH ssh=1.2.17
SSH ssh=1.2.30
SSH ssh=1.2.26
SSH ssh=1.2.27
SSH ssh=1.2.16
SSH ssh=1.2.28
SSH ssh=1.2.29
SSH ssh=1.2.22
SSH ssh=1.2.23
Remediation
Patch Available
Event History
Dec 19, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0992?
CVE-2000-0992 is considered a critical vulnerability due to its potential to allow arbitrary file overwriting.
2
How do I fix CVE-2000-0992?
To fix CVE-2000-0992, upgrade to a non-vulnerable version of SSH such as 1.2.32 or later.
3
What versions of SSH are affected by CVE-2000-0992?
CVE-2000-0992 affects SSH versions 1.2.14 to 1.2.31.
4
What type of attack does CVE-2000-0992 utilize?
CVE-2000-0992 utilizes a directory traversal attack, often referred to as a dot dot attack.
5
Can CVE-2000-0992 be exploited remotely?
Yes, CVE-2000-0992 can be exploited remotely by a malicious SCP server.