CVE-2004-1161 | BDVDB-2026-7498 Detail

Description#

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml
http://www.securityfocus.com/bid/11792
http://marc.info/?l=bugtraq&m=110581113814623&w=2
http://marc.info/?l=bugtraq&m=110202047507273&w=2

Exploit#

No public exploit known

History#

Version 12004-12-10Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.