RS
Product
Rsync
6
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Rsync to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-2083 | – | Apr 28 | Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted… Affected: 2.6.0; 2.6.1; 2.6.2; 2.6.3; 2.6.4; 2.6.5; +2 more |
| CVE-2004-0792 | – | Oct 20 | Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files Affected: 2.3.1; 2.3.2; 2.3.2_1.2; 2.3.2_1.2; 2.3.2_1.2; 2.3.2_1.2; +21 more |
| CVE-2004-0426 | – | Jul 7 | rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's… Affected: through 2.6 |
| CVE-2003-0962 | – | Dec 15 | Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail Affected: 2.3.1; 2.3.2; 2.4.0; 2.4.1; 2.4.3; 2.4.4; +10 more |
| CVE-2002-0048 | – | Feb 27 | Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service… Affected: 2.3.1; 2.3.2; 2.3.2_1.2; 2.3.2_1.2; 2.3.2_1.2; 2.3.2_1.2; +8 more |
| CVE-1999-0473 | – | Apr 7 | The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred Affected: through 2.3.1 |
Showing 6