4 matches found
CVE-2026-53797
A symlink race condition in rsync's source tree traversal allows a low-privileged local attacker to access unauthorized files. By atomically replacing a parent directory component with a symlink during an active transfer, the attacker can redirect file reads outside the intended transfer root,...
AZL-95780 CVE-2026-53797 affecting package rsync for versions less than 3.5.0-1
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths. Attackers can atomically replace a parent directory component with ...
DEBIAN-CVE-2014-3865
Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pseudo-header in conjunction with 1 missing --- and +++ header lines or 2 a +++ header line with a...