CVE-2012-2252

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the –rsh command line option.

Affected Software

Name	Vendor	Start Version	End Version
Rssh	Pizzashack	*	2.3.3 (including)
Rssh	Pizzashack	2.0.0 (including)	2.0.0 (including)
Rssh	Pizzashack	2.0.1 (including)	2.0.1 (including)
Rssh	Pizzashack	2.0.2 (including)	2.0.2 (including)
Rssh	Pizzashack	2.0.3 (including)	2.0.3 (including)
Rssh	Pizzashack	2.0.4 (including)	2.0.4 (including)
Rssh	Pizzashack	2.1.0 (including)	2.1.0 (including)
Rssh	Pizzashack	2.1.1 (including)	2.1.1 (including)
Rssh	Pizzashack	2.2.1 (including)	2.2.1 (including)
Rssh	Pizzashack	2.2.2 (including)	2.2.2 (including)
Rssh	Pizzashack	2.2.3 (including)	2.2.3 (including)
Rssh	Pizzashack	2.3.0 (including)	2.3.0 (including)
Rssh	Pizzashack	2.3.1 (including)	2.3.1 (including)
Rssh	Pizzashack	2.3.2 (including)	2.3.2 (including)
Rssh	Ubuntu	hardy	*
Rssh	Ubuntu	lucid	*
Rssh	Ubuntu	oneiric	*
Rssh	Ubuntu	precise	*
Rssh	Ubuntu	quantal	*
Rssh	Ubuntu	raring	*
Rssh	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-2252
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References