Pizzashack » Rssh : Security Vulnerabilities, CVEs, Published In 2013
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
Max CVSS
4.4
EPSS Score
0.04%
Published
2013-01-11
Updated
2017-08-29
rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.
Max CVSS
4.4
EPSS Score
0.04%
Published
2013-01-11
Updated
2017-08-29
2 vulnerabilities found