Skip to Content.
Sympa Menu

sm-security - [SM-Security] [SMGLSA-2006:7] rssh vulnerability

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Ladislav Hagara <ladislav.hagara AT unob.cz>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] [SMGLSA-2006:7] rssh vulnerability
  • Date: Fri, 17 Feb 2006 10:49:18 +0100

rssh:
Max Vozeler has reported a problem whereby rssh can allow users who have shell access to systems where rssh is installed (and rssh_chroot_helper is installed SUID) to gain root access to the system, due to the ability to chroot to arbitrary locations. There are a lot of potentially mitigating factors, but to be safe you should upgrade immediately. This bug affects all versions of rssh from v2.0.0 to v2.2.3, so please upgrade now!

For more info:
rssh homepage:
http://www.pizzashack.org/rssh/index.shtml
rssh security implications: http://www.pizzashack.org/rssh/security.shtml


-----
All rssh users should update to version 2.3.2:

# scribe update
# cast -c rssh

or

# scribe update
# sorcery queue-security
# cast --queue

--
Ladislav Hagara



  • [SM-Security] [SMGLSA-2006:7] rssh vulnerability, Ladislav Hagara, 02/17/2006

Archive powered by MHonArc 2.6.24.

Top of Page