CVE-2000-0992

sshd 1.2.xx - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Michal Zalewski · bashremotelinux
https://www.exploit-db.com/exploits/20253

Scores

EPSS 0.0285
EPSS Percentile 86.3%

Details

Status published
Products (20)
openbsd/openssh 1.2
openbsd/openssh 1.2.3
ssh/ssh 1.2.14
ssh/ssh 1.2.15
ssh/ssh 1.2.16
ssh/ssh 1.2.17
ssh/ssh 1.2.18
ssh/ssh 1.2.19
ssh/ssh 1.2.20
ssh/ssh 1.2.21
... and 10 more
Published Dec 19, 2000
Tracked Since Feb 18, 2026