NVD

Id
44070  
Name
CVE-2012-2252  
Description
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-01-10  
Modified Date
2013-01-16  
Seq
2012-2252  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221437 44070 CVE-2012-2252 20121127 Re: rssh security announcement  View
221438 44070 CVE-2012-2252 DSA-2578  View
221439 44070 CVE-2012-2252 [oss-security] 20121128 rssh: incorrect filtering of command line options  View
221440 44070 CVE-2012-2252 [oss-security] 20121128 Re: rssh: incorrect filtering of command line options  View
221441 44070 CVE-2012-2252 [oss-security] 20121127 Re: rssh: incorrect filtering of command line options  View
221442 44070 CVE-2012-2252 56708  View
221443 44070 CVE-2012-2252 rssh-command-line-command-exec(80335)  View
221444 44070 CVE-2012-2252 https://bugzilla.redhat.com/show_bug.cgi?id=880177  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30194 JVNDB-2012-005901 rssh におけるシェルのアクセス制限を回避される脆弱性 rssh には、不完全なブラックリストにより、rsync プロトコルが有効な場合、シェルのアクセス制限を回避される脆弱性が存在します。 CVE-2012-2252 55490 CVE-2012-2252 44070 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005901.html 2012-11-27 2013-01-15 View