FreeBSD : rsync -- off by one stack overflow (af8e3a0c-5009-11dc-8a43-003048705d5a)

BugTraq reports : The rsync utility is prone to an off-by-one buffer-overflow vulnerability. This issue is due to a failure of the application to properly bounds-check user-supplied input. Successfully exploiting this issue may allow arbitrary code-execution in the context of the affected utility...

[ MDKSA-2007:166 ] - Updated rsync packages fix off-by-one buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:166 http://www.mandriva.com/security/ Package : rsync Date : August 18, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: Sebastian Krahmer of the SUSE Security Team discovered an off-by-one...

CVE-2007-4091

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the fname function...

CVE-2007-4091

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the fname function...

CVE-2007-4091

CVE-2007-4091 concerns rsync 2.6.9 where multiple off-by-one errors in sender.c (in the f_name handling) could allow remote attackers to execute arbitrary code. The description is consistently stated across multiple sources tied to rsync, highlighting the vulnerable component as sender.c and the ...

CVE-2006-4091

CVE-2006-4091 involves multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02. The description states that remote attackers can inject arbitrary script or HTML via the Name or Comment fields. The connected documents do not provide additional technical...

CVE-2005-4091

CVE-2005-4091 : Cross-site scripting (XSS) vulnerability in the web interface component "1search.cgi" of 1-Script 1-Search 1.8 . The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter. This is documented in multiple sources (NVD/NVD entry). No explicit user-f...

MS:5CB99A6F-DF10-4091-A844-B6CFBD846375

...