VULNERABILITY INTELLIGENCE

CVE-2012-2252

CVSS score4.4 MEDIUM

EPSS probability0.36%

CISA KEVNot currently listed

Published2013-01-11

Last modified2026-06-16

Description

Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.