rssh, the small shell whose purpose is to restrict users to using scp or sftp, has a bug that allows a user to gather information outside of a chrooted jail unintentionally. Affected versions are 2.0 through 2.1.x.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33619/rsshFlaw.txt
Source: https://packetstormsecurity.com/files/33619/rsshFlaw.txt.html

