CVE-2006-1320

util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf...

CVE-2006-1320

CVE-2006-1320 : The Debian rssh package (rssh 2.3.0 in Debian GNU/Linux) contains a programming error where braces are not used to form a block, causing a faulty check for CVS and permitting rsync/rdist to bypass access restrictions configured in rssh.conf. Debian’s DSA-1109-1 notes the fix and l...