ALT-PU-2016-1710-1
Closed vulnerabilities
Published: 2013-01-11
BDU:2015-02798
Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: MEDIUM (4.4)
References:
Published: 2013-11-28
BDU:2015-09711
Уязвимости операционной системы Gentoo Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Severity: MEDIUM (4.4)
References:
Published: 2013-01-11
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2012-2252
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
Severity: MEDIUM (4.4)
References:
- 20121127 Re: rssh security announcement
- 20121127 Re: rssh security announcement
- 87926
- 87926
- 51307
- 51307
- 51343
- 51343
- DSA-2578
- DSA-2578
- [oss-security] 20121128 rssh: incorrect filtering of command line options
- [oss-security] 20121128 rssh: incorrect filtering of command line options
- [oss-security] 20121128 Re: rssh: incorrect filtering of command line options
- [oss-security] 20121128 Re: rssh: incorrect filtering of command line options
- [oss-security] 20121127 Re: rssh: incorrect filtering of command line options
- [oss-security] 20121127 Re: rssh: incorrect filtering of command line options
- 56708
- 56708
- https://bugzilla.redhat.com/show_bug.cgi?id=880177
- https://bugzilla.redhat.com/show_bug.cgi?id=880177
- rssh-command-line-command-exec(80335)
- rssh-command-line-command-exec(80335)
Published: 2012-08-31
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2012-3478
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.
Severity: LOW (2.1)
References:
- 20120508 rssh security announcement
- 20120508 rssh security announcement
- 20121127 Re: rssh security announcement
- 20121127 Re: rssh security announcement
- 50272
- 50272
- [rssh-discuss] 20120508 Re: rssh security announcement
- [rssh-discuss] 20120508 Re: rssh security announcement
- DSA-2530
- DSA-2530
- [oss-security] 20120810 CVE Request: rssh command-line parsing vulnerability
- [oss-security] 20120810 CVE Request: rssh command-line parsing vulnerability
- [oss-security] 20120810 Re: CVE Request: rssh command-line parsing vulnerability
- [oss-security] 20120810 Re: CVE Request: rssh command-line parsing vulnerability
- [oss-security] 20121127 Re: rssh: incorrect filtering of command line options
- [oss-security] 20121127 Re: rssh: incorrect filtering of command line options
- 53430
- 53430