CVE-2004-1161

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.33% chance of exploitation in the next 30 days, 94th percentile

Published

2004-12-10

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24795

References

• CVE Record
• NVD entry

Related

• CVE-2004-1151
• CVE-2004-1165
• CVE-2004-1150
• CVE-2004-1166
• CVE-2004-1147
• CVE-2004-1170