2816 matches found
FreeBSD Ports: rsync
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
rsync <= 2.5.7 Local stack overflow Root Exploit
No description provided by source. / rsync = 2.5.7 Local Exploit Saved EIP on stack is overwritten with address of shellcode in memory Generally rsync is not setuid or setgid so just a local shell is of no use So i used a portbinding shellcode as a PoC of a different attack vector. RET is...
openSUSE 10 Security Update : rsync (rsync-5207)
A remotely exploitable heap overflow in rsync's xattr code has been fixed. CVE-2008-1720 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rsync-5207. The text...
GLSA-200804-16 : rsync: Execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200804-16 rsync: Execution of arbitrary code Sebastian Krahmer of SUSE reported an integer overflow in the expanditemlist function in the file util.c which might lead to a heap-based buffer overflow when extended attribute xattr...
Debian Security Advisory DSA 1545-1 (rsync)
The remote host is missing an update to rsync announced via advisory DSA 1545-1. OpenVAS Vulnerability Test $Id: deb15451.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1545-1 rsync Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1545-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 8 : rsync-2.6.9-5.fc8 (2008-3047)
Tue Apr 8 2008 Simo Sorce 2.6.9-5.fc8 - Security release: http://rsync.samba.org/security.htmls302 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 7 : rsync-2.6.9-6.fc7 (2008-3060)
Tue Apr 8 2008 Simo Sorce 2.6.9-6.fc7 - Security release: http://rsync.samba.org/security.htmls302 - Wed Sep 5 2007 Simo Sorce 2.6.9-3.fc7 - Add patch to fix crash bug with hardlinks and ACLs patches Note that Tenable Network Security has extracted the preceding description block directly from...
[SECURITY] Fedora 7 Update: rsync-2.6.9-6.fc7
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
[SECURITY] Fedora 8 Update: rsync-2.6.9-5.fc8
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
rsync: Execution of arbitrary code
Background rsync is a file transfer program to keep remote directories synchronized. Description Sebastian Krahmer of SUSE reported an integer overflow in the expanditemlist function in the file util.c which might lead to a heap-based buffer overflow when extended attribute xattr support is...
Ubuntu 7.04 / 7.10 : rsync vulnerability (USN-600-1)
Sebastian Krahmer discovered that rsync could overflow when handling ACLs. An attacker could construct a malicious set of files that when processed by rsync could lead to arbitrary code execution or a crash. Note that Tenable Network Security has extracted the preceding description block directly...
Debian DSA-1545-1 : rsync - integer overflow
Sebastian Krahmer discovered that an integer overflow in rsync's code for handling extended attributes may lead to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
Rsync xattr支持整数溢出漏洞
BUGTRAQ ID: 28726 CVECAN ID: CVE-2008-1720 rsync是一个快速增量文件传输工具，用于在同一主机备份内部的备份。 rsync处理扩展属性数据时存在漏洞，如果rsync启用了扩展属性（xattr）支持的话，则负责处理该属性的代码中的整数溢出漏洞可能导致执行任意指令。 rsync rsync 2.6.9 - 3.0.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1545-1）以及相应补丁: DSA-1545-1：New rsync packages fix arbitrary code execution...
rsync integer overflow
Integer overflow on ACL handling...
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1545-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2008 http://www.debian.org/security/faq -...
USN-600-1: rsync vulnerability
Sebastian Krahmer discovered that rsync could overflow when handling ACLs. An attacker could construct a malicious set of files that when processed by rsync could lead to arbitrary code execution or a crash...
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1545-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2008 http://www.debian.org/security/faq -...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute xattr support enabled, might allow remote attackers to execute arbitrary code via unknown vectors. Remediation There is no fixed version for rsync. Referenc...
