Security Advisory

CVE-2004-1161

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2004-12-10 05:00:00
Last updated 2024-08-08 00:39:00
Assigner mitre
State PUBLISHED

Description

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.