CVE ID:	CVE-2012-2252
Description:	Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.
Test IDs:	1.3.6.1.4.1.25623.1.0.72625
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2252 BugTraq ID: 56708 http://www.securityfocus.com/bid/56708 Bugtraq: 20121127 Re: rssh security announcement (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html Debian Security Information: DSA-2578 (Google Search) http://www.debian.org/security/2012/dsa-2578 https://bugzilla.redhat.com/show_bug.cgi?id=880177 http://www.openwall.com/lists/oss-security/2012/11/28/3 http://www.openwall.com/lists/oss-security/2012/11/28/2 http://www.openwall.com/lists/oss-security/2012/11/27/15 http://osvdb.org/87926 http://secunia.com/advisories/51307 http://secunia.com/advisories/51343 XForce ISS Database: rssh-command-line-command-exec(80335) https://exchange.xforce.ibmcloud.com/vulnerabilities/80335