scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous s

Argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows

scponlyc in scponly 4.1 and earlier, when the operating system supports LD_PRELOAD mechanisms, allows local users to execute arbit

The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticat

scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authentic