CVE-2004-0609: Rssh

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.

Affected products

• Rssh Rssh: version 2.0 only; version 2.1 only

Published 2004-12-06. Last modified 2026-06-16.