PT-2011-1146 · Rsync+1 · Rsync+1
Matt Mccutchen
+1
·
Publicado
2011-03-28
·
Atualizado
2024-06-15
·
CVE-2011-1097
CVSS v2.0
5.1
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
rsync versions 3.0.6 through 3.0.7
rsync version 3.x before 3.0.8
Description
The issue allows remote rsync servers to cause a denial of service or possibly execute arbitrary code via malformed data when certain recursion, deletion, and ownership options are used. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out remotely.
Recommendations
For rsync versions 3.0.6 through 3.0.7, update to version 3.0.8 or later.
For rsync version 3.x before 3.0.8, update to version 3.0.8 or later.
As a temporary workaround, consider restricting access to the rsync server to minimize the risk of exploitation.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Red Hat
Rsync