Vulnerability Details CVE-2012-3478
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.8%
CVSS Severity
CVSS v2 Score 2.1
References
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
- http://secunia.com/advisories/50272
- http://sourceforge.net/mailarchive/message.php?msg_id=29235647
- http://www.debian.org/security/2012/dsa-2530
- http://www.openwall.com/lists/oss-security/2012/08/10/7
- http://www.openwall.com/lists/oss-security/2012/08/11/3
- http://www.openwall.com/lists/oss-security/2012/11/28/3
- http://www.securityfocus.com/bid/53430
- http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
- http://secunia.com/advisories/50272
- http://sourceforge.net/mailarchive/message.php?msg_id=29235647
- http://www.debian.org/security/2012/dsa-2530
- http://www.openwall.com/lists/oss-security/2012/08/10/7
- http://www.openwall.com/lists/oss-security/2012/08/11/3
- http://www.openwall.com/lists/oss-security/2012/11/28/3
- http://www.securityfocus.com/bid/53430
Products affected by CVE-2012-3478
-
cpe:2.3:a:pizzashack:rssh:2.0.0
-
cpe:2.3:a:pizzashack:rssh:2.0.1
-
cpe:2.3:a:pizzashack:rssh:2.0.2
-
cpe:2.3:a:pizzashack:rssh:2.0.3
-
cpe:2.3:a:pizzashack:rssh:2.0.4
-
cpe:2.3:a:pizzashack:rssh:2.1.0
-
cpe:2.3:a:pizzashack:rssh:2.1.1
-
cpe:2.3:a:pizzashack:rssh:2.2.1
-
cpe:2.3:a:pizzashack:rssh:2.2.2
-
cpe:2.3:a:pizzashack:rssh:2.2.3
-
cpe:2.3:a:pizzashack:rssh:2.3.0
-
cpe:2.3:a:pizzashack:rssh:2.3.1
-
cpe:2.3:a:pizzashack:rssh:2.3.2