NetSight
IP …
high7.2Public exploit code

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable d…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.

Affected products

VendorProductAffected versions
SshSsh
Versions 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5
SshSsh2
Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5

References