high7.5Public exploit code
CVE-2004-1161
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RSSH 2.x - Arbitrary Command Execution2004-12-02 · remote · linux · Verified
Impact
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rssh | Rssh | Versions 2.0, 2.1, 2.2, 2.2.1, 2.2.2 |
| Gentoo | Linux | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110202047507273&w=2
- http://marc.info/?l=bugtraq&m=110581113814623&w=2
- http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml
- http://www.securityfocus.com/bid/11792
- http://marc.info/?l=bugtraq&m=110202047507273&w=2
- http://marc.info/?l=bugtraq&m=110581113814623&w=2
- http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml
- http://www.securityfocus.com/bid/11792