CVE-2006-1320
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a...
CVE-2006-1320 is a high vulnerability (CVSS 7.5) in Rssh, published March 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. Fixed in rssh 2.2.3-1.sarge.2.
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf.
Exploit likelihood
What each source reports
NVD Score used
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf.
- Record
CVE-2006-1320- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf.
- Record
CVE-2006-1320- Updated
- 2026-11-02
EUVDEUVD-2006-1324 No score
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf.
- Record
EUVD-2006-1324- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-564g-fq7j-93hx No score
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a...
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf.
- Record
GHSA-564g-fq7j-93hx- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rsshDebian:3.1 |
before 2.2.3-1.sarge.2, plus listed versions 2.2.3-12.2.3-1.sarge.1 |
2.2.3-1.sarge.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |