Bug 445166 – <app-shells/rssh-2.3.4: Commands Filter Security Bypass Vulnerability (CVE-2012-2252)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2012-11-29 11:23:09 UTC]

From https://secunia.com/advisories/51343/ :

Description
A vulnerability has been reported in rssh, which can be exploited by malicious, local users to 
bypass certain security restrictions.

The vulnerability is caused due to an error when validating the "--rsh" command line option and can 
be exploited to bypass the allowed commands filter checks resulting in reduced shell restrictions.

The vulnerability is reported in versions prior to 2.3.4.


Solution
Update to version 2.3.4.

[Comment 1 Markos Chandras (RETIRED) 2012-11-29 11:36:44 UTC]

The bump is on my TODO list for today

[Comment 2 Markos Chandras (RETIRED) 2012-11-29 19:35:57 UTC]

Bumped. Please proceed with the stabilization

[Comment 3 Agostino Sarubbo 2012-11-29 19:39:55 UTC]

Arches, please test and mark stable:
=app-shells/rssh-2.3.4
Target keywords : "amd64 ppc x86"

[Comment 4 Dan Dexter 2012-11-30 06:28:33 UTC]

Archtested on x86: Everything OK
- Compiles with all USE-flags.
- Repoman reports no errors.
- Successfully set up a restrictive shell and verified that it worked as I intended it to.

[Comment 5 Sergey Popov 2012-11-30 06:40:45 UTC]

amd64 stable

[Comment 6 Agostino Sarubbo 2012-12-02 15:42:58 UTC]

ppc stable

[Comment 7 Andreas Schürch 2012-12-03 11:18:31 UTC]

x86 done, Thanks Dan Dexter for testing!
Last arch!

[Comment 8 Sean Amoss (RETIRED) 2012-12-03 12:03:19 UTC]

Thanks, everyone.

GLSA vote: no.

[Comment 9 Tim Sammut (RETIRED) 2012-12-10 18:59:02 UTC]

GLSA Vote: no too, closing noglsa.

[Comment 10 Sergey Popov 2013-11-18 13:56:39 UTC]

Reopening as it has been added to GLSA draft

[Comment 11 GLSAMaker/CVETool Bot 2013-11-28 08:48:43 UTC]

This issue was resolved and addressed in
 GLSA 201311-19 at http://security.gentoo.org/glsa/glsa-201311-19.xml
by GLSA coordinator Sergey Popov (pinkbyte).