2870 matches found
Fedora 7 : rsync-2.6.9-6.fc7 (2008-3060)
Tue Apr 8 2008 Simo Sorce 2.6.9-6.fc7 - Security release: http://rsync.samba.org/security.htmls302 - Wed Sep 5 2007 Simo Sorce 2.6.9-3.fc7 - Add patch to fix crash bug with hardlinks and ACLs patches Note that Tenable Network Security has extracted the preceding description block directly from...
Fedora 8 : rsync-2.6.9-5.fc8 (2008-3047)
Tue Apr 8 2008 Simo Sorce 2.6.9-5.fc8 - Security release: http://rsync.samba.org/security.htmls302 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
[SECURITY] Fedora 7 Update: rsync-2.6.9-6.fc7
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
[SECURITY] Fedora 8 Update: rsync-2.6.9-5.fc8
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
Ubuntu 7.04 / 7.10 : rsync vulnerability (USN-600-1)
Sebastian Krahmer discovered that rsync could overflow when handling ACLs. An attacker could construct a malicious set of files that when processed by rsync could lead to arbitrary code execution or a crash. Note that Tenable Network Security has extracted the preceding description block directly...
rsync: Execution of arbitrary code
Background rsync is a file transfer program to keep remote directories synchronized. Description Sebastian Krahmer of SUSE reported an integer overflow in the expanditemlist function in the file util.c which might lead to a heap-based buffer overflow when extended attribute xattr support is...
Debian DSA-1545-1 : rsync - integer overflow
Sebastian Krahmer discovered that an integer overflow in rsync's code for handling extended attributes may lead to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
Rsync xattr支持整数溢出漏洞
BUGTRAQ ID: 28726 CVECAN ID: CVE-2008-1720 rsync是一个快速增量文件传输工具，用于在同一主机备份内部的备份。 rsync处理扩展属性数据时存在漏洞，如果rsync启用了扩展属性（xattr）支持的话，则负责处理该属性的代码中的整数溢出漏洞可能导致执行任意指令。 rsync rsync 2.6.9 - 3.0.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1545-1）以及相应补丁: DSA-1545-1：New rsync packages fix arbitrary code execution...
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1545-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2008 http://www.debian.org/security/faq -...
rsync integer overflow
Integer overflow on ACL handling...
USN-600-1: rsync vulnerability
Sebastian Krahmer discovered that rsync could overflow when handling ACLs. An attacker could construct a malicious set of files that when processed by rsync could lead to arbitrary code execution or a crash...
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1545-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2008 http://www.debian.org/security/faq -...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors. Remediation There is no fixed version for rsync. Referenc...
Buffer overflow
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-1720
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors...
DEBIAN-CVE-2008-1720
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-1720
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-1720
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-1720
CVE-2008-1720 concerns rsync, where a buffer/overflow issue in rsync 2.6.9–3.0.1 with extended attribute support enabled can allow a remote attacker to execute arbitrary code or crash. Public sources attribute the overflow to handling of ACLs/xattr, enabling remote code execution or instability u...
