CVE-2002-1469

HIGH · CVSS 7.5 EPSS 2.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-04-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2002-1469

Severity

HIGH

CVSS

7.5

EPSS

2.86%

Original NVD Description

scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.