Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RSSH远程信息泄露漏洞
Vulnerability Description
rssh是一款小的shell，可以帮助系统管理员为特定用户提供通过scp和sftp登陆某系统的权限。 rssh包含一个漏洞，远程攻击者可以利用这个漏洞判断受限制环境外的文件是否存在。 在进行scp操作时，如果目标目录中的文件存在，就会返回错误消息，因此攻击者可以由此来判断CHROOT JAIL环境外的文件是否存在，造成信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A