2870 matches found
Moderate: Red Hat Security Advisory: rsync security update
An updated rsync package that fixes a path sanitizing bug is now available. The rsync program synchronizes files over a network. Versions of rsync up to and including version 2.6.2 contain a path sanitization issue. This issue could allow an attacker to read or write files outside of the rsync...
RHEL 2.1 / 3 : rsync (RHSA-2004:436)
An updated rsync package that fixes a path sanitizing bug is now available. The rsync program synchronizes files over a network. Versions of rsync up to and including version 2.6.2 contain a path sanitization issue. This issue could allow an attacker to read or write files outside of the rsync...
GLSA-200407-10 : rsync: Directory traversal in rsync daemon
The remote host is affected by the vulnerability described in GLSA-200407-10 rsync: Directory traversal in rsync daemon When rsyncd is used without chroot 'use chroot = false' in the rsyncd.conf file, the paths sent by the client are not checked thoroughly enough. If rsyncd is used with read-writ...
GLSA-200408-17 : rsync: Potential information leakage
The remote host is affected by the vulnerability described in GLSA-200408-17 rsync: Potential information leakage The paths sent by the rsync client are not checked thoroughly enough. It does not affect the normal send/receive filenames that specify what files should be transferred. It does affec...
FreeBSD Ports : rsync < 2.6.2_2
The remote host has an old version of rsync installed. There is a flaw in this version of rsync which, due to an input validation error, would allow a remote attacker to gain access to the remote system. An attacker, exploiting this flaw, would need network access to the TCP port. Successful...
Mandrake Linux Security Advisory : rsync (MDKSA-2004:083)
An advisory was sent out by the rsync team regarding a security vulnerability in all versions of rsync prior to and including 2.6.2. If rsync is running in daemon mode, and not in a chrooted environment, it is possible for a remote attacker to trick rsyncd into creating an absolute pathname while...
Fedora Core 1 : rsync-2.5.7-5.fc1.1 (2004-268)
This update backports a security fix to a path-sanitizing flaw that affects rsync when it is used in daemon mode without also using chroot. For more information see http://samba.org/rsync/securityaug04 Note that Tenable Network Security has extracted the preceding description block directly from...
rsync Detection
Binary data 1896.prm...
rsync < 2.5.2 Signedness Error Array Overflow
Binary data 1897.prm...
Fedora Core 2 : rsync-2.6.2-1.fc2.0 (2004-269)
This update backports a security fix to a path-sanitizing flaw that affects rsync when it is used in daemon mode without also using chroot. For more information see http://samba.org/rsync/securityaug04 Note that Tenable Network Security has extracted the preceding description block directly from...
Rsync < 2.6.3 Sanitize_path Function Module Path Escaping
Binary data 1965.prm...
rsync < 2.6.1 Traversal Arbitrary File Creation
Binary data 1216.prm...
CVE-2004-0792
Directory traversal vulnerability in the sanitizepath function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files...
CVE-2004-0792
CVE-2004-0792 describes a directory traversal in rsync 2.6.2 and earlier, via the sanitize_path function in util.c, when chroot is disabled. The vulnerability allows reading or writing certain files. Exploitation details are not provided in the documents beyond this description, and no remediatio...
CVE-2004-0792
Directory traversal vulnerability in the sanitizepath function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files...
[SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access
-------------------------------------------------------------------------- Debian Security Advisory DSA 538-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 538-1] New rsync packages fix unauthorised directory traversal and file access
-------------------------------------------------------------------------- Debian Security Advisory DSA 538-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...
DSA-538 rsync - unauthorised directory traversal and file access
Bulletin has no description...
rsync: Potential information leakage
Background rsync is a utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. rsyncd is the rsync daemon, which listens to connections from rsync clients. Description The paths sent by t...
