CVE-2019-3464: Critical severity Pizzashack Rssh vulnerability
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3464?
CVE-2019-3464 is considered a high severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2019-3464?
To fix CVE-2019-3464, it is recommended to update to the latest patched version of rssh that addresses the environment variable sanitization issue.
Which systems are affected by CVE-2019-3464?
CVE-2019-3464 affects multiple versions of rssh on Debian, Fedora, and Ubuntu operating systems.
What are the consequences of exploiting CVE-2019-3464?
Exploiting CVE-2019-3464 can allow an attacker to execute arbitrary shell commands, potentially compromising the system.
Is CVE-2019-3464 a common vulnerability?
CVE-2019-3464 is relatively well-known among the security community due to its impact on systems using rssh as a restricted shell.