CVE-2005-4532: Scponly

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to modify expected function calls in the setuid application.

Affected products

• Scponly Scponly: version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; version 3.6 only; version 3.7 only; …

Published 2005-12-28. Last modified 2026-06-16.