Severity by source
AV:L/AC:M/Au:N/C:P/I:P/A:P
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
AV:L/AC:M/Au:N/C:P/I:P/A:P
Lifecycle Timeline
1DescriptionCVE.org
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
AnalysisAI
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option. Rated medium severity (CVSS 4.4). No vendor patch available.
Technical ContextAI
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option. Affected products include: Pizzashack Rssh. Version information: before 2.3.4.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection'
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restri
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell t
rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass inte
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables i
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today