Description
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | rssh | 2.3.2-13squeeze1 | DSA-2530-1 |
Advisories 1
- DSA-2530-1 rssh - shell command injection Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20120508 rssh security announcement mailing-list
- [oss-security] 20121127 Re: rssh: incorrect filtering of command line options mailing-list
- [oss-security] 20120810 Re: CVE Request: rssh command-line parsing vulnerability mailing-list
- DSA-2530 vendor-advisory
- 50272 third-party-advisory
- 53430 vdb-entry
- [oss-security] 20120810 CVE Request: rssh command-line parsing vulnerability mailing-list
- [rssh-discuss] 20120508 Re: rssh security announcement mailing-list
- 20121127 Re: rssh security announcement mailing-list