Description
rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using the rssh_chroot_helper command to chroot to an external directory.
References
- GLSA-200512-15 vendor-advisory
- 308 third-party-advisory
- 18237 third-party-advisory
- http://www.pizzashack.org/rssh/security.shtml
- rssh-chroot-gain-privileges(23854) vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344424
- 16050 vdb-entry
- 18224 third-party-advisory