CVE-2012-2252: Medium severity pizzashack rssh vulnerability
Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
Other sources
It was discovered that rssh does not properly reject invocation of the rsync command with --rsh command line argument. It rejected command if option was specified as --rsh=command, but not when specified as --rsh command. The --rsh option makes rsync execute arbitrary command, resulting in bypass of the rssh restrictions.
This issue affects rssh packages in all current Fedora (16, 17) and EPEL (5, 6) versions.
Acknowledgement:
This issue was discovered by the Red Hat Security Response Team.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2252?
CVE-2012-2252 is considered a moderate severity vulnerability due to its potential to allow local users to bypass restricted shell access.
How do I fix CVE-2012-2252?
To fix CVE-2012-2252, upgrade to rssh version 2.3.4 or later.
Which versions of rssh are affected by CVE-2012-2252?
CVE-2012-2252 affects rssh versions prior to 2.3.4, including 2.3.3 and earlier.
Can CVE-2012-2252 be exploited remotely?
CVE-2012-2252 cannot be exploited remotely as it requires local user access.
What actions can a user take if they are affected by CVE-2012-2252?
Affected users should immediately update to the latest version of rssh to mitigate the vulnerability.