[scponly] [CVE-2007-6350] [CVE-2007-6415] design flaw may lead to execution of arbitrary commands

[disabled.user]

Binary package hint: scponly

References:
DSA-1473-1 (http://www.debian.org/security/2008/dsa-1473)

Quoting:
"Joachim Breitner discovered that Subversion support in scponly is
inherently insecure, allowing execution of arbitrary commands. Further
investigation showed that rsync and Unison support suffer from similar
issues. This set of issues has been assigned CVE-2007-6350.

In addition, it was discovered that it was possible to invoke with scp
with certain options that may lead to execution of arbitrary commands
(CVE-2007-6415).

This update removes Subversion, rsync and Unison support from the
scponly package, and prevents scp from being invoked with the dangerous
options."

[Michael Bienia (geser)]

For hardy CVE-2007-6415 will get fixed once scponly 4.6-1.2 got synced from Debian unstable (see bug 185383).

[William Grant (wgrant)]

CVE-2007-6350 is fixed in Gutsy, and both are fixed in Hardy.

[Luca Falavigna (dktrkranz)]

Edgy reached EOL on April 25th, 2008.

[LumpyCustard (orangelumpycustard)]

Please could someone mark this as Won't Fix for Feisty?

[Sergio Zanchetta (primes2h)]

The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life -
http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the
Gutsy task.

[Jamie Strandboge (jdstrand)]

scponly (4.6-1etch1build0.6.06.1) dapper-security; urgency=low

  * fake sync from Debian

scponly (4.6-1etch1) stable-security; urgency=high

  * Non-maintainer upload by the Security Team
  * Remove rsync, Subversion and Unison support because it was possible
    to gain shell access through them (CVE-2007-6350). Closes: #437148.
  * scp: -o and -F options are dangerous (CVE-2007-6415).

 -- Jamie Strandboge < <email address hidden>> Wed, 07 Oct 2009 07:47:50 -0500