Lucene search
K

4 matches found

F5 Networks
F5 Networks
added 2023/02/21 6:15 p.m.22 views

K5165: rsync directory traversal vulnerability CAN-2004-0792

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

6.4CVSS6.3AI score0.00777EPSS
Exploits0
OSV
OSV
added 2022/08/25 9:21 p.m.3 views

MGASA-2022-0302 Updated rsync packages fix security vulnerability

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...

7.4CVSS7.5AI score0.00923EPSS
Exploits1References5
EUVD
EUVD
added 2019/02/06 7:0 p.m.2 views

EUVD-2019-13103

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...

9.8CVSS9.4AI score0.0564EPSS
Exploits4References12
UbuntuCve
UbuntuCve
added 2007/12/01 6:46 a.m.30 views

CVE-2007-6199

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy...

9.3CVSS7.2AI score0.06572EPSS
Exploits0References3
Rows per page
Query Builder