Whoa. 35-year-old vuln in scp client inherited from rcp. Client only looks for directory traversal, not number of files xferred. If you scp a file into your homedir you could get a bonus file (eg .bash_command) that will get exec’d next shell launch.

Sign in to participate in the conversation

Server run by the main developers of the project 🐘 It is not focused on any particular niche interest - everyone is welcome as long as you follow our code of conduct!