Unrated severityNVD Advisory· Published Jan 25, 2006· Updated Jun 16, 2026
CVE-2006-0225
CVE-2006-0225
Description
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
35cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*+ 33 more
- cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.7:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.8:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.8.1p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.9:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:3.9.1p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:4.0p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:4.1p1:*:*:*:*:*:*:*
- cpe:2.3:a:openbsd:openssh:4.2p1:*:*:*:*:*:*:*
- (no CPE)range: = 4.2p1
Patches
Vulnerability mechanics
References
64- secunia.com/advisories/18595nvdPatchVendor Advisory
- www.us-cert.gov/cas/techalerts/TA07-072A.htmlnvdUS Government Resource
- ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patchnvd
- patches.sgi.com/support/free/security/advisories/20060703-01-U.ascnvd
- blogs.sun.com/security/entry/sun_alert_102961_security_vulnerabilitynvd
- docs.info.apple.com/article.htmlnvd
- itrc.hp.com/service/cki/docDisplay.donvd
- lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlnvd
- secunia.com/advisories/18579nvd
- secunia.com/advisories/18650nvd
- secunia.com/advisories/18736nvd
- secunia.com/advisories/18798nvd
- secunia.com/advisories/18850nvd
- secunia.com/advisories/18910nvd
- secunia.com/advisories/18964nvd
- secunia.com/advisories/18969nvd
- secunia.com/advisories/18970nvd
- secunia.com/advisories/19159nvd
- secunia.com/advisories/20723nvd
- secunia.com/advisories/21129nvd
- secunia.com/advisories/21262nvd
- secunia.com/advisories/21492nvd
- secunia.com/advisories/21724nvd
- secunia.com/advisories/22196nvd
- secunia.com/advisories/23241nvd
- secunia.com/advisories/23340nvd
- secunia.com/advisories/23680nvd
- secunia.com/advisories/24479nvd
- secunia.com/advisories/25607nvd
- secunia.com/advisories/25936nvd
- securityreason.com/securityalert/462nvd
- securitytracker.com/idnvd
- slackware.com/security/viewer.phpnvd
- sunsolve.sun.com/search/document.donvd
- support.avaya.com/elmodocs2/security/ASA-2006-158.htmnvd
- support.avaya.com/elmodocs2/security/ASA-2006-174.htmnvd
- support.avaya.com/elmodocs2/security/ASA-2006-262.htmnvd
- support.avaya.com/elmodocs2/security/ASA-2007-246.htmnvd
- www.gentoo.org/security/en/glsa/glsa-200602-11.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2006_08_openssh.htmlnvd
- www.openpkg.org/security/OpenPKG-SA-2006.003-openssh.htmlnvd
- www.osvdb.org/22692nvd
- www.redhat.com/archives/fedora-announce-list/2006-January/msg00062.htmlnvd
- www.redhat.com/support/errata/RHSA-2006-0044.htmlnvd
- www.redhat.com/support/errata/RHSA-2006-0298.htmlnvd
- www.redhat.com/support/errata/RHSA-2006-0698.htmlnvd
- www.securityfocus.com/archive/1/425397/100/0/threadednvd
- www.securityfocus.com/bid/16369nvd
- www.trustix.org/errata/2006/0004nvd
- www.ubuntu.com/usn/usn-255-1nvd
- www.vmware.com/support/vi3/doc/esx-3069097-patch.htmlnvd
- www.vmware.com/support/vi3/doc/esx-9986131-patch.htmlnvd
- www.vupen.com/english/advisories/2006/0306nvd
- www.vupen.com/english/advisories/2006/2490nvd
- www.vupen.com/english/advisories/2006/4869nvd
- www.vupen.com/english/advisories/2007/0930nvd
- www.vupen.com/english/advisories/2007/2120nvd
- www14.software.ibm.com/webapp/set2/sas/f/hmc/power5/install/v52.Readme.htmlnvd
- www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjdnvd
- bugzilla.redhat.com/bugzilla/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24305nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1138nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9962nvd
News mentions
0No linked articles in our index yet.