CVE-2012-3478: rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environmen...

Security readout for executives and security teams

CVE-2012-3478 affects rssh, a restricted shell used to limit what local users can do. In versions 2.3.3 and earlier, crafted command-line environment variables could bypass intended restrictions. This matters most where semi-trusted users receive limited SSH/SCP/SFTP-style access. Exposure is likely limited to systems that installed rssh and assigned it as a restricted shell for local accounts. Internet exposure depends on whether those accounts can authenticate remotely, but exploitation still requires local user access. Treat this as a targeted access-control issue, not a broad emergency. Prioritize shared servers, managed file-transfer hosts, and environments where untrusted or customer accounts rely on rssh restrictions. Mitigation focus: Inventory systems running rssh 2.3.3 or earlier.; Apply vendor security updates where available, including Debian advisory guidance.; Review whether restricted accounts still need rssh access..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.