Debian has issued an update for rssh. This fixes two vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions.

For more information:
SA51343

1) The vulnerability is caused due the application not validating command line options and can be exploited to bypass the allowed commands filter checks resulting in reduced shell restrictions via the "-e" option.

Solution
Apply updated packages via the apt-get package manager.

Provided and/or discovered by
1) James Clawson in a bug report.

Original Advisory
DSA-2578-1:
http://www.debian.org/security/2012/dsa-2578

James Clawson:
https://bugzilla.redhat.com/show_bug.cgi?id=877279

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers