What is the severity of CVE-2002-1469?

CVE-2002-1469 has a moderate severity rating due to its potential to allow remote authenticated users to bypass access controls.

How do I fix CVE-2002-1469?

To fix CVE-2002-1469, upgrade to scponly versions 2.5 or later, which address the path verification issue.

Who is affected by CVE-2002-1469?

Users of scponly versions 2.3 and 2.4 are affected by CVE-2002-1469.

What types of attacks can CVE-2002-1469 enable?

CVE-2002-1469 can enable attacks where an authenticated user uploads harmful programs by manipulating the PATH variable.

Is CVE-2002-1469 related to SSH security?

Yes, CVE-2002-1469 is related to SSH security as it involves vulnerabilities within the scponly restriction mechanism for SSH users.

Vulnerability/
CVE-2002-1469

high

7.5

CWE

NVD-CWE-Other

22/4/2003

1/9/2004

8/8/2024

CVE-2002-1469

First published: Tue Apr 22 2003(Updated: )

scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Scponly Scponly	=2.3
Scponly Scponly	=2.4

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-1469?
CVE-2002-1469 has a moderate severity rating due to its potential to allow remote authenticated users to bypass access controls.
How do I fix CVE-2002-1469?
To fix CVE-2002-1469, upgrade to scponly versions 2.5 or later, which address the path verification issue.
Who is affected by CVE-2002-1469?
Users of scponly versions 2.3 and 2.4 are affected by CVE-2002-1469.
What types of attacks can CVE-2002-1469 enable?
CVE-2002-1469 can enable attacks where an authenticated user uploads harmful programs by manipulating the PATH variable.
Is CVE-2002-1469 related to SSH security?
Yes, CVE-2002-1469 is related to SSH security as it involves vulnerabilities within the scponly restriction mechanism for SSH users.

collector/nvd-historical
collector/nvd-index
agent/references
agent/type
agent/softwarecombine
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/remedy
agent/author
agent/severity
agent/weakness
agent/last-modified-date
agent/description
agent/event
agent/tags
agent/source
vendor/scponly
canonical/scponly scponly
version/scponly scponly/2.3
version/scponly scponly/2.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2002-1469?
CVE-2002-1469 has a moderate severity rating due to its potential to allow remote authenticated users to bypass access controls.
How do I fix CVE-2002-1469?
To fix CVE-2002-1469, upgrade to scponly versions 2.5 or later, which address the path verification issue.
Who is affected by CVE-2002-1469?
Users of scponly versions 2.3 and 2.4 are affected by CVE-2002-1469.
What types of attacks can CVE-2002-1469 enable?
CVE-2002-1469 can enable attacks where an authenticated user uploads harmful programs by manipulating the PATH variable.
Is CVE-2002-1469 related to SSH security?
Yes, CVE-2002-1469 is related to SSH security as it involves vulnerabilities within the scponly restriction mechanism for SSH users.

CVE-2002-1469

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-1469?

How do I fix CVE-2002-1469?

Who is affected by CVE-2002-1469?

What types of attacks can CVE-2002-1469 enable?

Is CVE-2002-1469 related to SSH security?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2002-1469?

How do I fix CVE-2002-1469?

Who is affected by CVE-2002-1469?

What types of attacks can CVE-2002-1469 enable?

Is CVE-2002-1469 related to SSH security?