Description
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host.
References
- nt-rshsvc-ale-bypass(7422) vdb-entry
- Q158320 vendor-advisory