PT-2012-1172

Name of the Vulnerable Software and Affected Versions rssh versions 2.3.3 and earlier Description The issue allows local users to bypass intended restricted shell access. This can be achieved via crafted environment variables in the command line. Multiple vulnerabilities in the rssh package can...

CVE-2012-3478: Undefined Security Weakness

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line...

CVE-2012-3410: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix...

CVE-2009-4644

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...

CVE-2009-4644: Improper Neutralization of Special Elements used in an OS Command

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...

CVE-2002-1715: Undefined Security Weakness

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2002-1165

Sendmail Consortium's Restricted Shell SMRSH in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after 1 "||" sequences or 2 "/" characters, which are not properly...