description: Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.
problem types: Incomplete sanitization of passed arguments
affected:
{
product: rssh
vendor: Debian GNU/Linux
versions:
status: affected, version: All versions before 2.3.4-5+deb9u2 and 2.3.4-10
}