Bug 728412 (CVE-2018-20685)

Summary:	[Tracker] SSH scp access restriction bypass (CVE-2018-20685)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	675520, 723848
Bug Blocks:

Description Sam James archtester

2020-06-15 19:56:27 UTC

Description:
"In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side."

(Not a new vulnerability; creating tracker to free the alias).