2816 matches found
Fedora Core 5 : rsync-2.6.8-1.FC5 (2006-599)
Mon May 8 2006 Jay Fenlason 2.6.8-1.FC5 - New upstream release - Use the upstream xattr patch instead of mine. This closes bz190208 CVE-2006-2083 rsync buffer overflow issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
Fedora Core 4 : rsync-2.6.8-1.FC4 (2006-601)
Fri May 26 2006 Jay Fenlason 2.6.8-1.FC4 - Upgrade to 2.6.8, which closes bz190208 CVE-2006-2083 rsync buffer overflow issue by switching from my xattrs patch to the upstream one. This also obsoletes the -address patch. Note that Tenable Network Security has extracted the preceding description...
GLSA-200605-05 : rsync: Potential integer overflow
The remote host is affected by the vulnerability described in GLSA-200605-05 rsync: Potential integer overflow An integer overflow was found in the receivexattr function from the extended attributes patch xattr.c for rsync. The vulnerable function is only present when the 'acl' USE flag is set...
FreeBSD : scponly -- local privilege escalation exploits (b5a49db7-72fc-11da-9827-021106004fd6)
Max Vozeler reports : If ALL the following conditions are true, administrators using scponly-4.1 or older may be at risk of a local privilege escalation exploit : - the chrooted setuid scponlyc binary is installed - regular non-scponly users have interactive shell access to the box - a user...
rsync: Potential integer overflow
Background rsync is a server and client utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. Description An integer overflow was found in the receivexattr function from the extended...
rsync integer overflow
receivexattr integer overflow...
[Full-disclosure] [ GLSA 200605-05 ] rsync: Potential integer overflow
Gentoo Linux Security Advisory GLSA 200605-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
DEBIAN-CVE-2006-2083
Integer overflow in the receivexattr function in the extended attributes patch xattr.c for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow...
Integer overflow
Integer overflow in the receivexattr function in the extended attributes patch xattr.c for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow...
CVE-2006-2083
Integer overflow in the receivexattr function in the extended attributes patch xattr.c for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow...
CVE-2006-2083
Integer overflow in the receivexattr function in the extended attributes patch xattr.c for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow...
CVE-2006-2083
Integer overflow in the receivexattr function in the extended attributes patch xattr.c for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow...
CVE-2006-2083
Integer overflow in the receivexattr function in the extended attributes patch xattr.c for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow...
CVE-2006-2083
CVE-2006-2083 affects rsync before 2.6.8. An integer overflow in the receive_xattr function (xattr.c) with the extended attributes patch can trigger a buffer overflow, potentially allowing arbitrary code execution. Connected advisories confirm the issue and indicate upgrading to 2.6.8 (or applyin...
CVE-2006-1320
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf...
CVE-2006-1320
Removed by vendor...
CVE-2006-1320
util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf...
Mac OS X Multiple Vulnerabilities (Security Update 2006-002)
The remote host is running Apple Mac OS X, but lacks Security Update 2006-002. This security update contains fixes for the following applications : apachemodphp CoreTypes LaunchServices Mail Safari rsync C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21073;...
CVE-2005-3712
CVE-2005-3712 is a heap-based buffer overflow in rsync affecting Mac OS X 10.4 through 10.4.5. The issue allows remote authenticated users to execute arbitrary code via long extended attributes. The Connected documents confirm the affected platform (Mac OS X 10.4.x) and component (rsync) with the...