CVE Vulnerabilities

CVE-2012-2252

Published: Jan 11, 2013 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the –rsh command line option.

Affected Software

Name Vendor Start Version End Version
Rssh Pizzashack 2.1.0 2.1.0
Rssh Pizzashack 2.0.1 2.0.1
Rssh Pizzashack 2.3.0 2.3.0
Rssh Pizzashack 2.0.4 2.0.4
Rssh Pizzashack * 2.3.3
Rssh Pizzashack 2.2.1 2.2.1
Rssh Pizzashack 2.0.0 2.0.0
Rssh Pizzashack 2.3.1 2.3.1
Rssh Pizzashack 2.3.2 2.3.2
Rssh Pizzashack 2.0.2 2.0.2
Rssh Pizzashack 2.0.3 2.0.3
Rssh Pizzashack 2.2.2 2.2.2
Rssh Pizzashack 2.2.3 2.2.3
Rssh Pizzashack 2.1.1 2.1.1

References