CVE-2004-0175
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...
4.3 MediumFix available
CVE-2004-0175 is a medium vulnerability (CVSS 4.3) in Openbsd Openssh, published June 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.82%, the 79th percentile. Fixed in openssh 1:3.9p1-1.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.82%EPSS, 79th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:3.9p1-1openssh +98 more
Description
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
Exploit likelihood
1.82%Down 0.9 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshDebian:12 | before 1:3.9p1-1 | 1:3.9p1-1 |
opensshDebian:13 | before 1:3.9p1-1 | 1:3.9p1-1 |
opensshDebian:14 | before 1:3.9p1-1 | 1:3.9p1-1 |
rshRed Hat:enterprise_linux:3::as | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-debuginfoRed Hat:enterprise_linux:3::as | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::as | before 0:0.17-17.6 | 0:0.17-17.6 |
rshRed Hat:enterprise_linux:3::desktop | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-debuginfoRed Hat:enterprise_linux:3::desktop | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::desktop | before 0:0.17-17.6 | 0:0.17-17.6 |
rshRed Hat:enterprise_linux:3::es | before 0:0.17-17.6 | 0:0.17-17.6 |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rsh-debuginfoRed Hat:enterprise_linux:3::es | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::es | before 0:0.17-17.6 | 0:0.17-17.6 |
rshRed Hat:enterprise_linux:3::ws | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-debuginfoRed Hat:enterprise_linux:3::ws | before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::ws | before 0:0.17-17.6 | 0:0.17-17.6 |
opensshRed Hat:enterprise_linux:3::as | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::as | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::as | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::as | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::as | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::as | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
opensshRed Hat:enterprise_linux:3::desktop | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::desktop | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::desktop | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::desktop | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::desktop | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::desktop | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
opensshRed Hat:enterprise_linux:3::es | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::es | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::es | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::es | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::es | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::es | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
opensshRed Hat:enterprise_linux:3::ws | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::ws | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::ws | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::ws | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::ws | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::ws | before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
rshRed Hat:enterprise_linux:4::as | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::as | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::as | before 0:0.17-25.3 | 0:0.17-25.3 |
rshRed Hat:enterprise_linux:4::desktop | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::desktop | before 0:0.17-25.3 | 0:0.17-25.3 |
rshRed Hat:enterprise_linux:4::es | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::es | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::es | before 0:0.17-25.3 | 0:0.17-25.3 |
rshRed Hat:enterprise_linux:4::ws | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::ws | before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::ws | before 0:0.17-25.3 | 0:0.17-25.3 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs | before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:1.3.4-17 | 0:1.3.4-17 |
What each source reports
NVD Score used
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
CVE-2004-0175- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE ListNo score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
CVE-2004-0175- Updated
- 2026-11-02
EUVDEUVD-2004-0175No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
EUVD-2004-0175- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-384q-pv6w-p8vvNo score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
GHSA-384q-pv6w-p8vv- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVNo score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
CVE-2004-0175- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0175No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
DEBIAN-CVE-2004-0175- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2005-165.html
juniper.net/support/security/alerts/adv59739.txt
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147
Show 66 moreShow less
mandriva.com/security/advisories?name=MDVSA-2008:191
novell.com/linux/security/advisories/2004_09_kernel.html
secunia.com/advisories/19243
exchange.xforce.ibmcloud.com/vulnerabilities/16323
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184
osvdb.org/9550
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000831
ciac.org/ciac/bulletins/o-212.shtml
securityfocus.com/bid/9986
nvd.nist.gov/vuln/detail/CVE-2004-0175
github.com/advisories/GHSA-384q-pv6w-p8vv
security-tracker.debian.org/tracker/CVE-2004-0175
access.redhat.com/errata/RHSA-2005:074
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_074.json
cve.org/CVERecord?id=CVE-2004-0175
web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt