Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SSH受限SHELL可突破漏洞
Vulnerability Description
SSH是一款Secure Shell Protocol协议的实现，可以适用于多种操作系统。 SSH存在安全漏洞，可以导致攻击者突破受限SHELL环境执行任意命令。 一个授权用户如果设置成使用rbash或者rksh，远程授权用户可以上载文件到全局可写目录，并从全局目录中执行命令。在这种情况下，攻击者可以上载一脚本并执行脚本获得系统常规SEHLL，就可以突破受限制SHELL环境如rbash，然后进一步对系统进行攻击，问题存在于当命令从shell执行的时候，命令会建立一SHELL进程，然后rksh或者rbash
CVSS Information
N/A
Vulnerability Type
N/A