2.1
CVSSv2

CVE-2012-3478

Published: 31/08/2012 Updated: 02/03/2013
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

rssh 2.3.3 and previous versions allows local users to bypass intended restricted shell access via crafted environment variables in the command line.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pizzashack rssh 2.0.3

pizzashack rssh 2.0.4

pizzashack rssh 2.2.3

pizzashack rssh 2.0.2

pizzashack rssh

pizzashack rssh 2.1.0

pizzashack rssh 2.1.1

pizzashack rssh 2.0.0

pizzashack rssh 2.2.1

pizzashack rssh 2.2.2

pizzashack rssh 2.0.1

pizzashack rssh 2.3.1

pizzashack rssh 2.3.0

Vendor Advisories

Henrik Erkkonen discovered that rssh, a restricted shell for SSH, does not properly restrict shell access For the stable distribution (squeeze), this problem has been fixed in version 232-13squeeze1 For the unstable distribution (sid), this problem has been fixed in version 233-5 We recommend that you upgrade your rssh packages ...