rssh versions below 2.2.2 suffer from a format string vulnerability that may allow for privilege escalation.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34820/rsshFormat.txt
Source: https://packetstormsecurity.com/files/34820/rsshFormat.txt.html