CVE-2005-4533

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-28 · updated 2026-06-16

Description

Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.

Affected products

Scponly: 2.0, 2.1, 3.0, 3.5, 3.8, 3.9 (+2)

References

http://secunia.com/advisories/18223
http://secunia.com/advisories/18236
http://sublimation.org/scponly/#relnotes
http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml
http://www.securityfocus.com/bid/16051
https://exchange.xforce.ibmcloud.com/vulnerabilities/23875
http://secunia.com/advisories/18223
http://secunia.com/advisories/18236
http://sublimation.org/scponly/#relnotes
http://www.gentoo.org/security/en/glsa/glsa-200512-17.xml
http://www.securityfocus.com/bid/16051
https://exchange.xforce.ibmcloud.com/vulnerabilities/23875

Get alerted when CVE-2005-4533 or the next vulnerability affects your stack