CVE-2006-1320: Rssh

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf.

Affected products

• Rssh Rssh: version 2.3.0 only

Published 2006-03-20. Last modified 2026-06-16.