Approved changes feed: RSS · Atom

cpe:2.3:a:scponly:scponly:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorScponly (e8f18c28-879e-52df-808f-6f37e4e861ba)
ProductScponly (fbfcb212-3327-5341-bf11-16af23ff4970)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/scponly/scponly purl2cpe 2026-06-01 10:12:51.449078
pkg:rpm/fedora/scponly purl2cpe 2026-06-01 10:12:51.449080
pkg:rpm/opensuse/scponly purl2cpe 2026-06-01 10:12:51.449082
pkg:sourceforge/scponly purl2cpe 2026-06-01 10:12:51.449084

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4533 vulnerable 2026-06-08 04:48:44.192788 Details available
Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.
Published: 2005-12-28T01:00:00.000Z
Updated: 2024-08-07T23:46:05.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1162 vulnerable 2026-06-08 04:47:53.154755 Details available
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
Published: 2004-12-10T05:00:00.000Z
Updated: 2024-08-08T00:39:00.859Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.