CVE-2012-3478

{"id": "CVE-2012-3478", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-08-31T18:55:05.683", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2012-05/0036.html", "source": "secalert@redhat.com"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2012-11/0101.html", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/50272", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://sourceforge.net/mailarchive/message.php?msg_id=29235647", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2012/dsa-2530", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/08/10/7", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/08/11/3", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/11/28/3", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/53430", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line."}, {"lang": "es", "value": "rssh v2.3.3 y anteriores permite evitar las restricciones de acceso a objetos shell a usuarios locales a trav\u00e9s de variables de entorno modificadas en la l\u00ednea de comandos.\r\n"}], "lastModified": "2013-03-02T04:44:07.983", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pizzashack:rssh:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6F4A975-E5EE-42E5-A3DD-5ED7D736D3FD", "versionEndIncluding": "2.3.2"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "405D117C-7A65-48DD-B898-4E7526A47392"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "02796C4B-F155-4D6B-9692-0C467B259B3D"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D3BE629-9E24-4E48-9ADD-61174BBAD270"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "147D0EA0-3F3E-488E-A5FF-618614B34D9C"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "994DDFAC-D9D6-4146-8628-5014E52A6847"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA58CBF8-1826-44D7-B2F0-999B8DA61F1F"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D984CE9-5283-4DAE-9D42-9B5AE31A4002"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D718FA8D-2699-4150-AB39-357E1585EB46"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "255C9863-4D7E-46CE-A1C9-F897EFB85D38"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72CB8450-D58D-4824-931F-2D61451F2C5C"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C75A3EB-ABDF-458B-8B49-505791EF8749"}, {"criteria": "cpe:2.3:a:pizzashack:rssh:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6BACEEB-9CBD-4E94-A3EF-61E220F2D68E"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}