EDB-46516
PoCOpenSSH SCP Client - Write Arbitrary Files
view exploit source exploit_dbtype remoteauthor Harry Sintonenpublished 2019-01-11catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-6111US | medium5.9 | Exploit | ||
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the s… | ||||
| CVE-2019-6110US | medium6.8 | Exploit | ||
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for ex… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan