CVE-2007-6350: scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code...

Security readout for executives and security teams

scponly was intended to restrict SSH users to file-transfer style activity. In version 4.6 and earlier, authenticated users could invoke allowed helper programs in ways that escaped those restrictions and ran code. This matters mainly where organizations still use scponly for constrained SFTP/SCP-style accounts. Exposure is limited to systems using scponly 4.6 or earlier, especially where remote users authenticate to restricted accounts and helper subcommands are available. The bundle does not provide CPEs, CVSS, or complete product packaging details. Prioritize if scponly protects partner, customer, or contractor file-transfer accounts. The vulnerability can turn a restricted authenticated account into code execution. Legacy exposure is the main business risk because this CVE is old and may persist on forgotten transfer hosts. Mitigation focus: Inventory systems using scponly and identify versions 4.6 or earlier.; Apply relevant vendor or distribution security updates where available.; Review Debian, Gentoo, Fedora, and upstream scponly guidance before changing behavior..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.