Nessus Plugin #15580

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200410-28] rssh: Format string vulnerability

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2004 Michel Arboi

Summary:

rssh: Format string vulnerability

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

GLSA:200410-28

Description:

The remote host is affected by the vulnerability described in GLSA-200410-28
(rssh: Format string vulnerability)


Florian Schilhabel from the Gentoo Linux Security Audit Team found a format
string vulnerability in rssh syslogging of failed commands.

Impact

Using a malicious command, it may be possible for a remote authenticated
user to execute arbitrary code on the target machine with user rights,
effectively bypassing any restriction of rssh.

Workaround

There is no known workaround at this time.

References:
http://www.pizzashack.org/rssh/security.shtml


Solution:
All rssh users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-shells/rssh-2.2.2"


Risk factor : High