Unrated severityNVD Advisory· Published Jan 25, 2008· Updated Jun 16, 2026

CVE-2007-6415

Description

scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute arbitrary code by invoking scp, as implemented by OpenSSH, with the -F and -o options.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
OpenSSH/scpllm-create
Range: <=4.6
Scponly/Scponlyllm-fuzzy
Range: <=4.6

Patches

Vulnerability mechanics

References

secunia.com/advisories/28538nvdPatchVendor Advisory
bugs.debian.org/cgi-bin/bugreport.cginvdExploit
bugs.gentoo.org/show_bug.cginvd
secunia.com/advisories/28944nvd
secunia.com/advisories/28981nvd
security.gentoo.org/glsa/glsa-200802-06.xmlnvd
www.debian.org/security/2008/dsa-1473nvd
www.redhat.com/archives/fedora-package-announce/2008-February/msg00546.htmlnvd
www.redhat.com/archives/fedora-package-announce/2008-February/msg00595.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000