Although rssh and scponly were designed to limit the use of a shell on a remote host, various underlying programs that they are allowed to use may allow for arbitrary command execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35229/rsshscponly.txt
Source: https://packetstormsecurity.com/files/35229/rsshscponly.txt.html