Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Secure Copy Protocol Vulnerabilities

Several vulnerabilities have been identified which affect all implementations of Secure Copy Protocol (SCP). A remote attacker could exploit some of these vulnerabilities to make changes to an affected machine.

Threat ID:
CC-2888
Category:
Threat Severity:
Low
Threat Vector:
Vulnerability
Published:
16 January 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Several vulnerabilities have been identified which affect all implementations of Secure Copy Protocol (SCP). A remote attacker could exploit some of these vulnerabilities to make changes to an affected machine.

Threat details

SCP provides an authentication mechanism for transferring files across a network. It operates above Secure Shell and is a more secure implementation of Remote Copy Protocol.

The vulnerabilities can allow a malicious SCP server to:

  • Modify permissions of a target directory.
  • Overwrite arbitrary files in a target directory.
  • Hide malicious operations.

For further information:

Remediation steps

Type Step

Users and administrators are encouraged to review the Sintonen security advisory and apply the necessary updates.

Last edited: 14 February 2020 2:45 pm