CVE-2005-4533: Scponly

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via "getopt" style argument specifications, which are not filtered.

Affected products

• Scponly Scponly: version 2.0 only; version 2.1 only; version 3.0 only; version 3.5 only; version 3.8 only; version 3.9 only; …

Published 2005-12-28. Last modified 2026-06-16.