VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Apr 16, 2026

CVE-2004-1161

CVE-2004-1161

Description

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.

Affected products

6
  • Rssh/Rssh5 versions
    cpe:2.3:a:rssh:rssh:2.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:rssh:rssh:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.2.2:*:*:*:*:*:*:*
  • Gentoo/Linux
    cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.