Remote File Existence Disclosure in rssh 2.0 through 2.1.x

CVE-2004-0609 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.

Learn more about our User Device Pen Test.