| ID | CVE-2017-17459 | ||||||
| Summary | http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117. | ||||||
| References |
|
||||||
| Vulnerable Configurations |
|
||||||
| CVSS |
|
||||||
| CWE | NVD-CWE-noinfo | ||||||
| CAPEC |
|
||||||
| Access |
|
||||||
| Impact |
|
||||||
| cvss-vector via4 | AV:N/AC:M/Au:N/C:C/I:C/A:C | ||||||
| refmap via4 |
|
||||||
| Last major update | 03-10-2019 - 00:03 | ||||||
| Published | 07-12-2017 - 18:29 | ||||||
| Last modified | 03-10-2019 - 00:03 |
