Launchpad.net

CVE 2012-3478

rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.

See the CVE page on Mitre.org for more details.