Vulnerability Bulletins |
DSA-4377 rssh - security update |
|
| Affected software | Debian |
|
The ESnet security team discovered a vulnerability in rssh, a restrictedshell that allows users to perform only scp, sftp, cvs, svnserve(Subversion), rdist and/or rsync operations. Missing validation in thescp support could result in the bypass of this restriction, allowing theexecution of arbitrary shell commands. More info: https://www.debian.org/security/2019/dsa-4377 |
|