CVE-2012-3478: Pizzashack Rssh

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.

Affected products

• Pizzashack Rssh: up to and including 2.3.2; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; …

Published 2012-08-31. Last modified 2026-06-16.