CVE-2012-2251

Published: Jan 11, 2013Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.

Affected (1)

Products: Pizzashack: Rssh

Pizzashack

1 product

Rssh

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Pizzashack Rssh	Version 2.3.2

Running on/with	Platform Versions
Debian Debian Linux	All versions
Fedoraproject Fedora	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html

Source: security@debian.org

http://secunia.com/advisories/51307

Source: security@debian.org

Vendor Advisory

http://www.debian.org/security/2012/dsa-2578

Source: security@debian.org

http://www.openwall.com/lists/oss-security/2012/11/27/15

Source: security@debian.org

http://www.securityfocus.com/bid/56708

Source: security@debian.org

https://bugzilla.redhat.com/show_bug.cgi?id=877279

Source: security@debian.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/80334

Source: security@debian.org

http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html