Candidate: CVE-2012-3478 PublicDate: 2012-08-31 18:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3478 Description: rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: Henrik Erkkonen CVSS: Patches_rssh: vendor: http://www.debian.org/security/2012/dsa-2530 upstream_rssh: released (2.3.3-5) hardy_rssh: ignored (reached end-of-life) lucid_rssh: ignored (reached end-of-life) natty_rssh: released (2.3.2-13squeeze1build0.11.04.1) oneiric_rssh: ignored (reached end-of-life) precise_rssh: ignored (reached end-of-life) precise/esm_rssh: DNE (precise was needed) quantal_rssh: not-affected (2.3.3-5) raring_rssh: not-affected (2.3.3-5) saucy_rssh: not-affected (2.3.3-5) trusty_rssh: not-affected (2.3.3-5) trusty/esm_rssh: not-affected (2.3.3-5) utopic_rssh: not-affected (2.3.3-5) vivid_rssh: not-affected (2.3.3-5) vivid/stable-phone-overlay_rssh: DNE vivid/ubuntu-core_rssh: DNE wily_rssh: not-affected (2.3.3-5) xenial_rssh: not-affected (2.3.3-5) yakkety_rssh: not-affected (2.3.3-5) zesty_rssh: not-affected (2.3.3-5) devel_rssh: not-affected (2.3.3-5)