PT-2004-1075 · Rsync · Rsync
Vincenzo Ciaglia
·
Published
2004-08-17
·
Updated
2017-10-11
·
CVE-2004-0792
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
rsync versions 2.6.2 and earlier
rsync versions 2.6.0 and earlier
rsync version 2.5.7
Description
The issue is related to a directory traversal vulnerability in the sanitize path function. This vulnerability can be exploited to read or write certain files, potentially leading to confidentiality and integrity breaches. The exploitation can be done remotely.
Recommendations
For rsync versions 2.6.2 and earlier, consider updating to a version later than 2.6.2 to resolve the issue.
For rsync versions 2.6.0 and earlier, update to a version later than 2.6.0.
For rsync version 2.5.7, update to a version later than 2.5.7.
As a temporary workaround, consider disabling the chroot functionality until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Rsync