Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0792
HistoryOct 20, 2004 - 4:00 a.m.

CVE-2004-0792

2004-10-2004:00:00
[email protected]
web.nvd.nist.gov

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON

Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

Affected configurations

NVD
Node
andrew_tridgellrsyncMatch2.3.1
OR
andrew_tridgellrsyncMatch2.3.2
OR
andrew_tridgellrsyncMatch2.3.2_1.2alpha
OR
andrew_tridgellrsyncMatch2.3.2_1.2arm
OR
andrew_tridgellrsyncMatch2.3.2_1.2intel
OR
andrew_tridgellrsyncMatch2.3.2_1.2m68k
OR
andrew_tridgellrsyncMatch2.3.2_1.2ppc
OR
andrew_tridgellrsyncMatch2.3.2_1.2sparc
OR
andrew_tridgellrsyncMatch2.3.2_1.3
OR
andrew_tridgellrsyncMatch2.4.0
OR
andrew_tridgellrsyncMatch2.4.1
OR
andrew_tridgellrsyncMatch2.4.3
OR
andrew_tridgellrsyncMatch2.4.4
OR
andrew_tridgellrsyncMatch2.4.5
OR
andrew_tridgellrsyncMatch2.4.6
OR
andrew_tridgellrsyncMatch2.4.8
OR
andrew_tridgellrsyncMatch2.5.0
OR
andrew_tridgellrsyncMatch2.5.1
OR
andrew_tridgellrsyncMatch2.5.2
OR
andrew_tridgellrsyncMatch2.5.3
OR
andrew_tridgellrsyncMatch2.5.4
OR
andrew_tridgellrsyncMatch2.5.5
OR
andrew_tridgellrsyncMatch2.5.6
OR
andrew_tridgellrsyncMatch2.5.7
OR
andrew_tridgellrsyncMatch2.6
OR
andrew_tridgellrsyncMatch2.6.1
OR
andrew_tridgellrsyncMatch2.6.2

Related

freebsd 1
ubuntucve 1
openvas 10
nessus 8
suse 1
cvelist 1
cve 1
debiancve 1
redhat 1
f5 2
gentoo 1
osv 1
freebsd
freebsd
rsync -- path sanitizing vulnerability
2004-08-12 00:00:00
ubuntucve
ubuntucve
CVE-2004-0792
2004-10-20 00:00:00
openvas
openvas
rsync path sanitation vulnerability
2005-11-03 00:00:00
FreeBSD Ports: rsync
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200408-17 (rsync)
2008-09-24 00:00:00
nessus
nessus
Slackware 10.0 / 8.1 / 9.0 / 9.1 / current : rsync (SSA:2004-285-01)
2005-07-13 00:00:00
Debian DSA-538-1 : rsync - unsanitised input processing
2004-09-29 00:00:00
RHEL 2.1 / 3 : rsync (RHSA-2004:436)
2004-09-01 00:00:00
suse
suse
remote system compromise in rsync
2004-08-16 14:49:13
cvelist
cvelist
CVE-2004-0792
2004-08-18 04:00:00
cve
cve
CVE-2004-0792
2004-10-20 04:00:00
debiancve
debiancve
CVE-2004-0792
2004-10-20 04:00:00
redhat
redhat
(RHSA-2004:436) rsync security update
2004-09-01 00:00:00
f5
f5
K5165 : rsync directory traversal vulnerability CAN-2004-0792
2013-03-28 00:00:00
SOL5165 - rsync directory traversal vulnerability - CAN-2004-0792
2007-05-16 00:00:00
gentoo
gentoo
rsync: Potential information leakage
2004-08-17 00:00:00
osv
osv
rsync - unauthorised directory traversal and file access
2004-08-17 00:00:00

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.0%

JSON
Related for NVD:CVE-2004-0792
freebsd1ubuntucve1openvas10nessus8suse1cvelist1cve1debiancve1redhat1f52gentoo1osv1