CVE-2006-2083

2006-04-2821:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2083

integer overflow

receive_xattr function

rsync

buffer overflow

nvd

security vulnerability

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.

CPENameOperatorVersion
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.7
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.4
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.5
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.2
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.1
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.6
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.0
andrew_tridgell:rsyncandrew tridgell rsynceq2.6.3

CPE	Name	Operator	Version
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.7
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.4
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.5
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.2
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.1
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.6
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.0
andrew_tridgell:rsync	andrew tridgell rsync	eq	2.6.3