Vulnerabilities > Pizzashack > Rssh > 2.2.3

DATE CVE VULNERABILITY TITLE RISK
2013-01-11 CVE-2012-2252 Remote Arbitrary Command Execution vulnerability in rssh Command Line Filtering
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
local
pizzashack
4.4
2012-08-31 CVE-2012-3478 Permissions, Privileges, and Access Controls vulnerability in Pizzashack Rssh
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.
local
low complexity
pizzashack CWE-264
2.1