sm-security AT lists.ibiblio.org
Subject: Security bugs are reported here via bugzilla
List archive
- From: Ladislav Hagara <ladislav.hagara AT unob.cz>
- To: sm-security AT lists.ibiblio.org
- Subject: [SM-Security] [SMGLSA-2006:7] rssh vulnerability
- Date: Fri, 17 Feb 2006 10:49:18 +0100
rssh:
Max Vozeler has reported a problem whereby rssh can allow users who have shell access to systems where rssh is installed (and rssh_chroot_helper is installed SUID) to gain root access to the system, due to the ability to chroot to arbitrary locations. There are a lot of potentially mitigating factors, but to be safe you should upgrade immediately. This bug affects all versions of rssh from v2.0.0 to v2.2.3, so please upgrade now!
For more info:
rssh homepage:
http://www.pizzashack.org/rssh/index.shtml
rssh security implications: http://www.pizzashack.org/rssh/security.shtml
-----
All rssh users should update to version 2.3.2:
# scribe update
# cast -c rssh
or
# scribe update
# sorcery queue-security
# cast --queue
--
Ladislav Hagara
- [SM-Security] [SMGLSA-2006:7] rssh vulnerability, Ladislav Hagara, 02/17/2006
Archive powered by MHonArc 2.6.24.