PatchTheCVErssh vulnerabilities
Recent CVEs affecting rssh products. 4 tracked.
rssh has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-03-20. Highest priority: CVE-2004-1161 (score 60/100).
- CVE-2006-1320 HIGH 7.5 DOWNGRADE util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to
- CVE-2005-3345 HIGH 7.2 DOWNGRADE rssh 2.0.0 through 2.2.3 allows local users to bypass access restrictions and gain root privileges by using th
- CVE-2004-1161 HIGH 7.5 DOWNGRADE MITIGATE rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authentic
- CVE-2004-0609 MEDIUM 5.0 DOWNGRADE rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authe
FAQ
How do I fix rssh vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rssh being exploited right now?
None of the tracked rssh CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rssh CVE should I patch first?
CVE-2004-1161 currently ranks highest (60/100): rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authentic.