Vulnerability Bulletins |
DSA-4382 rssh - security update |
|
| Affected software | Debian |
|
Nick Cleaton discovered two vulnerabilities in rssh, a restricted shellthat allows users to perform only scp, sftp, cvs, svnserve (Subversion),rdist and/or rsync operations. Missing validation in the rsync supportcould result in the bypass of this restriction, allowing the executionof arbitrary shell commands. More info: https://www.debian.org/security/2019/dsa-4382 |
|