CVE-2012-2252

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
• osvdb.org/87926
• secunia.com/advisories/51307 · Vendor Advisory
• secunia.com/advisories/51343 · Vendor Advisory
• debian.org/security/2012/dsa-2578
• openwall.com/lists/oss-security/2012/11/27/15
• openwall.com/lists/oss-security/2012/11/28/2
• openwall.com/lists/oss-security/2012/11/28/3
• securityfocus.com/bid/56708
• bugzilla.redhat.com/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/80335

rssh のその他の脆弱性

• CVE-2019-3464緊急 9.8Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that shou…
• CVE-2019-3463緊急 9.8Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict …
• CVE-2019-1000018高 7.8rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in a…
• CVE-2012-2251中 4.4rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shel…
• CVE-2012-3478低 2.1rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.