What’s Vulnerable › Vulnerabilities

CVE-2012-3478

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-31 · updated 2026-06-16
• Weakness: CWE-264

Description

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.

Affected products

• Pizzashack Rssh: through 2.3.2; 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.1.0 (+6)

References

• http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
• http://secunia.com/advisories/50272
• http://sourceforge.net/mailarchive/message.php?msg_id=29235647
• http://www.debian.org/security/2012/dsa-2530
• http://www.openwall.com/lists/oss-security/2012/08/10/7
• http://www.openwall.com/lists/oss-security/2012/08/11/3
• http://www.openwall.com/lists/oss-security/2012/11/28/3
• http://www.securityfocus.com/bid/53430
• http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html
• http://secunia.com/advisories/50272

Get alerted when CVE-2012-3478 or the next vulnerability affects your stack