VULNERABILITY INTELLIGENCE

CVE-2012-2251

CVSS score4.4 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2013-01-11
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P

Description

rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references