CVE-2012-3478

CVE-2012-3478 affects the restricted shell implementation rssh (versions 2.3.3 and earlier). The root cause is that crafted environment variables in the command line allow local users to bypass intended restricted-shell access, enabling privilege escalation to some degree and bypass of restrictio...

CVE-2012-2252

CVE-2012-2252 affects rssh prior to version 2.3.4 when the rsync protocol is enabled. The vulnerability is an incomplete blacklist in command line handling that allows local users to bypass restricted shell access via the --rsh option. Practically, an attacker with local access could exploit this...