CVE ID:	CVE-2017-15906
Description:	The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
Test IDs:	1.3.6.1.4.1.25623.1.0.891500   1.3.6.1.4.1.25623.1.0.812050   1.3.6.1.4.1.25623.1.1.10.2017.0483   1.3.6.1.4.1.25623.1.0.873884   1.3.6.1.4.1.25623.1.0.812051   1.3.6.1.4.1.25623.1.1.13.2018.067.01   1.3.6.1.4.1.25623.1.1.2.2018.1140   1.3.6.1.4.1.25623.1.1.2.2018.1141   1.3.6.1.4.1.25623.1.0.873819   1.3.6.1.4.1.25623.1.0.873905
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-15906 BugTraq ID: 101552 http://www.securityfocus.com/bid/101552 https://security.gentoo.org/glsa/201801-05 https://www.oracle.com/security-alerts/cpujan2020.html https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html RedHat Security Advisories: RHSA-2018:0980 https://access.redhat.com/errata/RHSA-2018:0980