EulerOS 2.0 SP8 : rsync (EulerOS-SA-2019-1659)

According to the version of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The recvfiles function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.7.2esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

2.3B Files Exposed in a Year: A New Record for Misconfigs

The last 12 months has seen the exposure of a record 2.3 billion files across cloud databases and online shares, according to an analysis released on Thursday. A report from Digital Shadows’ Photon Research Team, Too Much Information: The Sequel, assessed the scale of inadvertent global data...

EulerOS Virtualization 3.0.1.0 : rsync (EulerOS-SA-2019-1460)

According to the version of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemonfilterlist data...

The vulnerability of the rsync command processor in the RSSH command interface, due to insufficient input validation, allows a malicious actor to execute arbitrary commands.

The vulnerability of the rsync command processor in the RSSH command shell is related to errors in input data validation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

Debian DLA-1725-1 : rsync security update

Trail of Bits used the automated vulnerability discovery tools developed for the DARPA Cyber Grand Challenge to audit zlib. As rsync, a fast, versatile, remote and local file-copying tool, uses an embedded copy of zlib, those issues are also present in rsync. CVE-2016-9840 In order to avoid...

[SECURITY] [DLA 1725-1] rsync security update

Package : rsync Version : 3.1.1-3+deb8u2 CVE ID : CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2018-5764 Trail of Bits used the automated vulnerability discovery tools developed for the DARPA Cyber Grand Challenge to audit zlib. As rsync, a fast, versatile, remote and local...

DLA-1725-1 rsync - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1725-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2019:0054-1 Security update for gitolite

This update for gitolite fixes the following security issue: - CVE-2018-20683: The rsync command line was not handled correctly, allow malicious rsync options boo1121570 The version update to 3.6.11 also contains a number of upstream bug fixes...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-60.6.1esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. The patched...

FreeBSD : rssh - multiple vulnerabilities (d193aa9f-3f8c-11e9-9a24-6805ca0b38e8)

NVD reports : rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in allowscp permission that can result in Local command execution. This attack appear to be exploitable via An authorized SSH user with the allowscp...

The vulnerability of the “rsync” implementation in the rssh command interface allows a hacker to execute arbitrary commands on the rssh interface.

The vulnerability of the “rsync” command in the rssh command interface is related to insufficient cleaning of the arguments passed to the command. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the rssh interface...

Photon OS 2.0: Rsync PHSA-2018-2.0-0009

An update of the rsync package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121904...

Photon OS 2.0: Rsync PHSA-2017-0051

An update of the rsync package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0051. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121775;...

Photon OS 2.0: Rsync PHSA-2018-2.0-0041

An update of the rsync package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0041. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121943...

Photon OS 1.0: Rsync PHSA-2018-1.0-0132

An update of the rsync package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0132. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121838...

Photon OS 1.0: Rsync PHSA-2018-1.0-0096

An update of the rsync package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121795...

CVE-2019-3464

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...

Design/Logic Flaw

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...