CVE-2000-0992: OpenBSD OpenSSH

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.

Affected products

• OpenBSD OpenSSH: version 1.2 only; version 1.2.3 only
• SSH SSH: version 1.2.14 only; version 1.2.15 only; version 1.2.16 only; version 1.2.17 only; version 1.2.18 only; version 1.2.19 only; …

Published 2000-12-19. Last modified 2026-09-23.