PT-2004-1075 · Rsync · Rsync
Vincenzo Ciaglia
·
Publicado
2004-08-17
·
Atualizado
2017-10-11
·
CVE-2004-0792
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
rsync versions 2.6.2 and earlier
rsync versions 2.6.0 and earlier
rsync version 2.5.7
Description
The issue is related to a directory traversal vulnerability in the sanitize path function. This vulnerability can be exploited to read or write certain files, potentially leading to confidentiality and integrity breaches. The exploitation can be done remotely.
Recommendations
For rsync versions 2.6.2 and earlier, consider updating to a version later than 2.6.2 to resolve the issue.
For rsync versions 2.6.0 and earlier, update to a version later than 2.6.0.
For rsync version 2.5.7, update to a version later than 2.5.7.
As a temporary workaround, consider disabling the chroot functionality until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Rsync