CVE-2004-1161

Publication date 10 January 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
rssh 7.04 feisty
Fixed 2.3.0-1.1
6.10 edgy
Fixed 2.3.0-1.1
6.06 LTS dapper
Fixed 2.3.0-1.1