VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Jun 16, 2026

CVE-2004-1161

CVE-2004-1161

Description

rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Rssh/Rssh5 versions
    cpe:2.3:a:rssh:rssh:2.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:rssh:rssh:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rssh:rssh:2.2.2:*:*:*:*:*:*:*
  • File Project/Linux
    cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.