Description
rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.
References
- 10574 vdb-entry
- 20040619 Security flaw in rssh mailing-list
- rssh-jail-obtain-info(16470) vdb-entry