OpenSSH <= 4.2p1 Security Vulnerability

When performing local-to-local copying functions, scp expands shell characters in the filename twice before making a system() call. A filename that contains specially crafted characters may cause arbitrary commands to be executed. If scp is used to transfer untrusted files or directories, a local user may be able to cause arbitrary code to be executed with the privileges of the process running scp.

Please see the references for more information on the vulnerabilities.

OpenSSH version 4.2p1 and prior.

Checks if a vulnerable version is present on the target host.

Update to version 4.3 or later.