CVE-2012-3478: Low severity Pizzashack Rssh vulnerability
Published Aug 31, 2012
·Updated
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.
Affected Software
13 affected components
Pizzashack Rssh<=2.3.2
Pizzashack Rssh=2.0.0
Pizzashack Rssh=2.0.1
Pizzashack Rssh=2.0.2
Pizzashack Rssh=2.0.3
Pizzashack Rssh=2.0.4
Pizzashack Rssh=2.1.0
Pizzashack Rssh=2.1.1
Pizzashack Rssh=2.2.1
Pizzashack Rssh=2.2.2
Pizzashack Rssh=2.2.3
Pizzashack Rssh=2.3.0
Pizzashack Rssh=2.3.1
Event History
Aug 31, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3478?
CVE-2012-3478 is considered a medium severity vulnerability due to its potential for local user exploitation.
2
How do I fix CVE-2012-3478?
To mitigate CVE-2012-3478, upgrade to rssh version 2.3.3 or later, which addresses this vulnerability.
3
Who is affected by CVE-2012-3478?
Local users on systems running rssh version 2.3.2 and earlier are affected by CVE-2012-3478.
4
What type of vulnerability is CVE-2012-3478?
CVE-2012-3478 is a local privilege escalation vulnerability that allows users to bypass restricted shell access.
5
When was CVE-2012-3478 disclosed?
CVE-2012-3478 was disclosed in May 2012.