CVE-2012-2252

Severity

44%

Complexity

34%

Confidentiality

106%

Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist'

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.

Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist'

CVSS 2.0 Base Score 4.4. CVSS Attack Vector: local. CVSS Attack Complexity: medium. CVSS Vector: (AV:L/AC:M/Au:N/C:P/I:P/A:P).

Overview

Type

pizzashack rssh

First reported 12 years ago

2013-01-11 01:55:00

Last updated 7 years ago

2017-08-29 01:31:00

Affected Software

pizzashack rssh 2.0.0

2.0.0

pizzashack rssh 2.0.1

2.0.1

pizzashack rssh 2.0.2

2.0.2

pizzashack rssh 2.0.3

2.0.3

pizzashack rssh 2.0.4

2.0.4

pizzashack rssh 2.1.0

2.1.0

pizzashack rssh 2.1.1

2.1.1

pizzashack rssh 2.2.1

2.2.1

pizzashack rssh 2.2.2

2.2.2

pizzashack rssh 2.2.3

2.2.3

pizzashack rssh 2.3.0

2.3.0

pizzashack rssh 2.3.1

2.3.1

pizzashack rssh 2.3.2

2.3.2

References

20121127 Re: rssh security announcement

87926

51307

Vendor Advisory

51343