Lucene search

K
cve[email protected]CVE-2012-2251
HistoryJan 11, 2013 - 1:55 a.m.

CVE-2012-2251

2013-01-1101:55:00
CWE-20
web.nvd.nist.gov
38
cve-2012-2251
rssh
restricted shell access
local users
debian
fedora
rsync protocol

6.1 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) β€œ-e” or (2) β€œβ€“β€ command line option.

CPENameOperatorVersion
pizzashack:rsshpizzashack rssheq2.3.2

6.1 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%