CVE-2004-0175
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...
4.3 MediumFix available
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
Exploit likelihood
1.82%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
CVE-2004-0175- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
CVE-2004-0175- Updated
- 2026-11-02
EUVDEUVD-2004-0175 No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
EUVD-2004-0175- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-384q-pv6w-p8vv No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
GHSA-384q-pv6w-p8vv- Weakness
- CWE-22
- Updated
- 2026-11-02
OSV No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
CVE-2004-0175- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0175 No score
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.
- Record
DEBIAN-CVE-2004-0175- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshDebian:12 |
before 1:3.9p1-1 | 1:3.9p1-1 |
opensshDebian:13 |
before 1:3.9p1-1 | 1:3.9p1-1 |
opensshDebian:14 |
before 1:3.9p1-1 | 1:3.9p1-1 |
rshRed Hat:enterprise_linux:3::as |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::as |
before 0:0.17-17.6 | 0:0.17-17.6 |
rshRed Hat:enterprise_linux:3::desktop |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::desktop |
before 0:0.17-17.6 | 0:0.17-17.6 |
rshRed Hat:enterprise_linux:3::es |
before 0:0.17-17.6 | 0:0.17-17.6 |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rsh-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::es |
before 0:0.17-17.6 | 0:0.17-17.6 |
rshRed Hat:enterprise_linux:3::ws |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.17-17.6 | 0:0.17-17.6 |
rsh-serverRed Hat:enterprise_linux:3::ws |
before 0:0.17-17.6 | 0:0.17-17.6 |
opensshRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::as |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
opensshRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::desktop |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
opensshRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::es |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
opensshRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpassRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-askpass-gnomeRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-clientsRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
openssh-serverRed Hat:enterprise_linux:3::ws |
before 0:3.6.1p2-33.30.4 | 0:3.6.1p2-33.30.4 |
rshRed Hat:enterprise_linux:4::as |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::as |
before 0:0.17-25.3 | 0:0.17-25.3 |
rshRed Hat:enterprise_linux:4::desktop |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::desktop |
before 0:0.17-25.3 | 0:0.17-25.3 |
rshRed Hat:enterprise_linux:4::es |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::es |
before 0:0.17-25.3 | 0:0.17-25.3 |
rshRed Hat:enterprise_linux:4::ws |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.17-25.3 | 0:0.17-25.3 |
rsh-serverRed Hat:enterprise_linux:4::ws |
before 0:0.17-25.3 | 0:0.17-25.3 |
krb5Red Hat:enterprise_linux:3::as |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::as |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::as |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::as |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::as |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::desktop |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::desktop |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::es |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::es |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::es |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::es |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::es |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:3::ws |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-develRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-libsRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-serverRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5-workstationRed Hat:enterprise_linux:3::ws |
before 0:1.2.7-47 | 0:1.2.7-47 |
krb5Red Hat:enterprise_linux:4::as |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::as |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::as |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::as |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::as |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::desktop |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::desktop |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::desktop |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::desktop |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::desktop |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::es |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::es |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::es |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::es |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::es |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5Red Hat:enterprise_linux:4::ws |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-develRed Hat:enterprise_linux:4::ws |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-libsRed Hat:enterprise_linux:4::ws |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-serverRed Hat:enterprise_linux:4::ws |
before 0:1.3.4-17 | 0:1.3.4-17 |
krb5-workstationRed Hat:enterprise_linux:4::ws |
before 0:1.3.4-17 | 0:1.3.4-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0175 is a medium vulnerability (CVSS 4.3) in Openbsd Openssh, published June 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.82%, the 78th percentile. Fixed in openssh 1:3.9p1-1.
References
redhat.com/support/errata/RHSA-2005-165.html
juniper.net/support/security/alerts/adv59739.txt
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147
Show 66 moreShow less
mandriva.com/security/advisories?name=MDVSA-2008:191
novell.com/linux/security/advisories/2004_09_kernel.html
secunia.com/advisories/19243
exchange.xforce.ibmcloud.com/vulnerabilities/16323
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184
osvdb.org/9550
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000831
ciac.org/ciac/bulletins/o-212.shtml
securityfocus.com/bid/9986
nvd.nist.gov/vuln/detail/CVE-2004-0175
github.com/advisories/GHSA-384q-pv6w-p8vv
security-tracker.debian.org/tracker/CVE-2004-0175
access.redhat.com/errata/RHSA-2005:074
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_074.json
cve.org/CVERecord?id=CVE-2004-0175
web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt