Home page logo

oss-sec logo oss-sec mailing list archives

Re: rssh: incorrect filtering of command line options
From: Yves-Alexis Perez <corsac () debian org>
Date: Wed, 28 Nov 2012 00:42:45 +0100

On mer., 2012-11-28 at 00:21 +0100, Yves-Alexis Perez wrote:
        Incorrect filtering of the "--rsh" option: the filter preventing usage of the
        "--rsh=" option would not prevent passing "--rsh". This vulnerability affects
        upstream code.

This is indeed CVE-2012-2252, sorry for that.

Yves-Alexis Perez
 Debian Security

Attachment: signature.asc
Description: This is a digitally signed message part

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]