CVE-2019-3463 Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the exe...
CriticalCVSS 9.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pizzashack rssh | = 2.3.4 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| fedoraproject fedora | = 29 | No fix listed |
| fedoraproject fedora | = 30 | No fix listed |
| fedoraproject fedora | = 31 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| alpine/rssh(Alpine:v3.13) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.14) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.15) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.16) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.17) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.18) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.19) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.20) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.21) | < 2.3.4-r2 | 2.3.4-r2 |
| alpine/rssh(Alpine:v3.22) | < 2.3.4-r2 | 2.3.4-r2 |
| Debian GNU/Linux rssh | = All versions before 2.3.4-5+deb9u2 and 2.3.4-10 | No fix listed |
References
- 20210526 KL-001-2021-007: CommScope Ruckus IoT Controller Undocumented Account mailing-list not-applicable third-party-advisory
- 106839 third-party-advisory vdb-entry
- [debian-lts-announce] 20190206 [SECURITY] [DLA 1660-1] rssh security update mailing-list third-party-advisory
- FEDORA-2019-e47add6b2b vendor-advisory
- FEDORA-2019-bfb407659e vendor-advisory
- FEDORA-2019-d1487c13ac vendor-advisory
- GLSA-202007-29 third-party-advisory vendor-advisory
- tracker.debian.org third-party-advisory
- USN-3946-1 third-party-advisory vendor-advisory
- DSA-4382 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory