CVE-2012-3478

Published: Aug 31, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.

Affected (13)

Products: Pizzashack: Rssh

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Pizzashack Rssh	version ≤ 2.3.2
Pizzashack Rssh	Version 2.0.0
Pizzashack Rssh	Version 2.0.1
Pizzashack Rssh	Version 2.0.2
Pizzashack Rssh	Version 2.0.3
Pizzashack Rssh	Version 2.0.4
Pizzashack Rssh	Version 2.1.0
Pizzashack Rssh	Version 2.1.1
Pizzashack Rssh	Version 2.2.1
Pizzashack Rssh	Version 2.2.2
Pizzashack Rssh	Version 2.2.3
Pizzashack Rssh	Version 2.3.0
Pizzashack Rssh	Version 2.3.1

Related CWEs

References (18)

http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html

Source: secalert@redhat.com

http://secunia.com/advisories/50272

Source: secalert@redhat.com

Vendor Advisory

http://sourceforge.net/mailarchive/message.php?msg_id=29235647

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2530

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/10/7

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/11/3

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/28/3

Source: secalert@redhat.com

http://www.securityfocus.com/bid/53430

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50272

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sourceforge.net/mailarchive/message.php?msg_id=29235647

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2530

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/10/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/11/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/11/28/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/53430

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.