CVE-2016-9401

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address...

CVE-2016-9401: Use After Free

popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address...

PT-2017-10117 · Gnu +5 · Bash +5

Name of the Vulnerable Software and Affected Versions: bash affected versions not specified Description: The issue allows local users to bypass the restricted shell and cause a use-after-free via a crafted address, potentially related to the popd command in bash. There is no information provided...

Dodo Upload 1.3 - Upload Shell (Bypass) Vulnerability

No description provided by source...

UBUNTU-CVE-2012-2252

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option...

CVE-2012-2251

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a 1 "-e" or 2 "--" command line option...

CVE-2012-2251: Improper Input Validation

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a 1 "-e" or 2 "--" command line option...

PT-2013-1086

Name of the Vulnerable Software and Affected Versions rssh version 2.3.2 Description The issue allows local users to bypass intended restricted shell access. This can be achieved via the -e or -- command line option. Multiple vulnerabilities in the rssh package may lead to a breach of...

CVE-2012-2252: Undefined Security Weakness

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option...

CVE-2012-5966

The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command...

PT-2012-1172

Name of the Vulnerable Software and Affected Versions rssh versions 2.3.3 and earlier Description The issue allows local users to bypass intended restricted shell access. This can be achieved via crafted environment variables in the command line. Multiple vulnerabilities in the rssh package can...

CVE-2012-3478: Undefined Security Weakness

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line...

CVE-2012-3410: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix...

CVE-2009-4644

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...

CVE-2009-4644: Improper Neutralization of Special Elements used in an OS Command

Accellion Secure File Transfer Appliance before 80105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program...

CVE-2002-1715: Undefined Security Weakness

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access...

CVE-2002-1165

Sendmail Consortium's Restricted Shell SMRSH in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after 1 "||" sequences or 2 "/" characters, which are not properly...