Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Apr 29, 2026
CVE-2012-3478
CVE-2012-3478
Description
rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.
Affected products
13cpe:2.3:a:pizzashack:rssh:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:pizzashack:rssh:*:*:*:*:*:*:*:*range: <=2.3.2
- cpe:2.3:a:pizzashack:rssh:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:pizzashack:rssh:2.3.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- secunia.com/advisories/50272nvdVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2012-05/0036.htmlnvd
- archives.neohapsis.com/archives/bugtraq/2012-11/0101.htmlnvd
- sourceforge.net/mailarchive/message.phpnvd
- www.debian.org/security/2012/dsa-2530nvd
- www.openwall.com/lists/oss-security/2012/08/10/7nvd
- www.openwall.com/lists/oss-security/2012/08/11/3nvd
- www.openwall.com/lists/oss-security/2012/11/28/3nvd
- www.securityfocus.com/bid/53430nvd
News mentions
0No linked articles in our index yet.