CVE-2003-0962

2003-12-1505:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2003-0962

heap-based buffer overflow

rsync

remote code execution

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.379 Low

EPSS

Percentile

97.2%

JSON

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

CPENameOperatorVersion
redhat:rsyncredhat rsynceq2.4.6-2
andrew_tridgell:rsyncandrew tridgell rsynceq2.5.1
engardelinux:secure_communityengardelinux secure communityeq1.0.1
redhat:rsyncredhat rsynceq2.5.5-1
andrew_tridgell:rsyncandrew tridgell rsynceq2.5.5
redhat:rsyncredhat rsynceq2.4.6-5
engardelinux:secure_linuxengardelinux secure linuxeq1.2
engardelinux:secure_linuxengardelinux secure linuxeq1.1
andrew_tridgell:rsyncandrew tridgell rsynceq2.3.1
andrew_tridgell:rsyncandrew tridgell rsynceq2.5.2

CPE	Name	Operator	Version
redhat:rsync	redhat rsync	eq	2.4.6-2
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.5.1
engardelinux:secure_community	engardelinux secure community	eq	1.0.1
redhat:rsync	redhat rsync	eq	2.5.5-1
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.5.5
redhat:rsync	redhat rsync	eq	2.4.6-5
engardelinux:secure_linux	engardelinux secure linux	eq	1.2
engardelinux:secure_linux	engardelinux secure linux	eq	1.1
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.3.1
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.5.2