Fedora Update for rssh FEDORA-2012-20109

Check for the Version of rssh OpenVAS Vulnerability Test Fedora Update for rssh FEDORA-2012-20109 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora 17 : rssh-2.3.4-1.fc17 (2012-20109)

Update to 2.3.4 and fix CVE-2012-2251 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[SECURITY] Fedora 17 Update: rssh-2.3.4-1.fc17

rssh is a restricted shell for use with OpenSSH, allowing only scp and/or sftp. For example, if you have a server which you only want to allow users to copy files off of via scp, without providing shell access, you can use rssh to do that. It is a alternative to scponly...

Debian Security Advisory DSA 2578-1 (rssh)

The remote host is missing an update to rssh announced via advisory DSA 2578-1. OpenVAS Vulnerability Test $Id: deb25781.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2578-1 rssh Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2578-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Re: rssh security announcement

All, Today I released rssh-2.3.4, which fixes an old issue, and a new issue: On Tue, May 08, 2012 at 01:14:26PM -0500, Derek Martin wrote: rssh is a shell for restricting SSH access to a machine to only scp, sftp, or a small set of similar applications. http://www.pizzashack.org/rssh/ Henrik...

rssh security vulnerabilities

Multiple environment limitation bypass possibilities...

rssh rsync --rsh 选项远程任意命令执行漏洞

BUGTRAQ ID: 56708 CVECAN ID: CVE-2012-2252 rssh是配合OpenSSH使用的shell，仅允许scp、sftp。现在也支持rdist、rsync、cvs。 rssh 2.3.3-3在使用rsync时没有正确过滤 --rsh 选项，可导致远程攻击者利用此漏洞执行任意命令。 0 rssh 2.3.3 厂商补丁： rssh ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://prdownloads.sourceforge.net/rssh/rssh-2.3.4.tar.gz?download...

Debian DSA-2578-1 : rssh - insufficient filtering of rsync command line

James Clawson discovered that rssh, a restricted shell for OpenSSH to be used with scp, sftp, rdist and cvs, was not correctly filtering command line options. This could be used to force the execution of a remote script and thus allow arbitrary command execution. Two CVE were assigned : -...

DSA-2578-1 rssh - several

Bulletin has no description...

[SECURITY] [DSA 2578-1] rssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2578-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 28, 2012 http://www.debian.org/security/faq -...

CVE-2012-3478

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line...

Design/Logic Flaw

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line...

CVE-2012-3478

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line...

CVE-2012-3478

CVE-2012-3478 affects the restricted shell implementation rssh (versions 2.3.3 and earlier). The root cause is that crafted environment variables in the command line allow local users to bypass intended restricted-shell access, enabling privilege escalation to some degree and bypass of restrictio...

CVE-2012-3478

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line...

CVE-2012-3478

Removed by vendor...

FreeBSD Ports: rssh

The remote host is missing an update to the system as announced in the referenced advisory. VID a4598875-ec91-11e1-8bd8-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID a4598875-ec91-11e1-8bd8-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: rssh

The remote host is missing an update to the system as announced in the referenced advisory. VID 65b25acc-e63b-11e1-b81c-001b77d09812 OpenVAS Vulnerability Test $ Description: Auto generated from VID 65b25acc-e63b-11e1-b81c-001b77d09812 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2530-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...