Vulnerability in Rssh

CVE-2004-0609

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.

EPSS: 0.014 (69.9th percentile) — read the EPSS interpretation.

Affected products

  • Rssh — versions 2.0, 2.1
  • N/a — versions n/a

References