Vulnerability in Ssh

CVE-2002-1715

SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.

EPSS: 0.009 (55.6th percentile) — read the EPSS interpretation.

Affected products

  • Ssh — versions 1.2.0, 1.2.1, 1.2.2
  • Ssh Ssh2 — versions 2.0, 2.0.1, 2.0.2
  • N/a — versions n/a

References