PT-2007-7090 · Rsync+1 · Rsync+1

Publicado 2007-12-01 · Atualizado 2018-10-15 · CVE-2007-6200

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.0.0pre6

Description The issue allows remote attackers to bypass exclude, exclude from, and filter rules and read or write hidden files when running a writable rsync daemon. This can be achieved via options such as symlink, partial-dir, backup-dir, and an unspecified dest option.

Recommendations For versions prior to 3.0.0pre6, update to version 3.0.0pre6 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-6200

RHSA-2011:0999

RHSA-2011_0999

Produtos afetados

Red Hat

Rsync

Referências · 22

• https://access.redhat.com/security/cve/CVE-2007-6200 · Nota
• http://vupen.com/english/advisories/2008/2268 · Nota
• http://secunia.com/advisories/27853 · Nota
• http://securitytracker.com/id?1019012 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-6200 · Aviso do Fabricante
• http://securityfocus.com/bid/26639 · Nota
• http://vupen.com/english/advisories/2007/4057 · Nota
• https://osv.dev/vulnerability/CVE-2007-6200 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2011:0999 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html · Aviso do Fabricante
• http://secunia.com/advisories/28412 · Nota
• http://secunia.com/advisories/27863 · Aviso do Fabricante
• http://secunia.com/advisories/28457 · Nota
• http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2011-0999.html · Aviso do Fabricante