rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.
| Software | From | Fixed in |
|---|---|---|
| pizzashack / rssh | 2.3.2 | 2.3.2.x |