CVE-2019-3463

Mô tả

Tham khảo

• seclists.org/fulldisclosure/2021/May/78 · Mailing List
• securityfocus.com/bid/106839 · Third Party Advisory
• lists.debian.org/debian-lts-announce/2019/02/msg00007.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HO3MDU3AH5SLYBKHH5PJ6PHC63ASIF42
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KR2OHTHMJVV4DO3HDRFQQZ5JENHDJQEN
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T42YYNWJZG422GATWAHAEK4A24OKY557
• security.gentoo.org/glsa/202007-29 · Third Party Advisory
• tracker.debian.org/news/1026713/accepted-rssh-234-5deb9u2-source-amd64-into-stable-embargoed-stable · Third Party Advisory
• usn.ubuntu.com/3946-1 · Third Party Advisory

Lỗ hổng khác của rssh

• CVE-2019-3464NGHIÊM TRỌNG 9.8Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that shou…
• CVE-2019-1000018CAO 7.8rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in a…
• CVE-2012-2252TRUNG BÌNH 4.4Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricte…
• CVE-2012-2251TRUNG BÌNH 4.4rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shel…
• CVE-2012-3478THẤP 2.1rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.