vulnerability

FreeBSD: VID-D193AA9F-3F8C-11E9-9A24-6805CA0B38E8 (CVE-2019-3464): rssh - multiple vulnerabilities

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2019-02-02
Added
2019-03-07
Modified
2019-05-07

Description

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

Solution

freebsd-upgrade-package-rssh
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.