CVE-2004-0792

CVE-2004-0792 describes a directory traversal in rsync 2.6.2 and earlier, via the sanitize_path function in util.c, when chroot is disabled. The vulnerability allows reading or writing certain files. Exploitation details are not provided in the documents beyond this description, and no remediatio...

CVE-2004-0426

CVE-2004-0426 : The rsync daemon (read/write mode) is vulnerable when not using chroot, allowing remote attackers to write files outside the module’s path due to improper path sanitization. Affected: rsync before 2.6.1. Impact: potential arbitrary file creation/overwrite on the target filesystem ...

CVE-2003-0962

CVE-2003-0962 is a heap-based/buffer overflow in rsync versions prior to 2.5.7 when run in server mode. The vulnerability could allow a remote attacker to execute arbitrary code on the rsync server, potentially while in a chroot jail. The issue affects servers listening on port 873. Advisories fr...

CVE-2006-2083

CVE-2006-2083 affects rsync before 2.6.8. An integer overflow in the receive_xattr function (xattr.c) with the extended attributes patch can trigger a buffer overflow, potentially allowing arbitrary code execution. Connected advisories confirm the issue and indicate upgrading to 2.6.8 (or applyin...

CVE-2002-0048

Summary: CVE-2002-0048 describes multiple signedness errors in rsync I/O functions that can allow a remote attacker to cause a denial of service or execute arbitrary code in rsync when used as client or daemon/server. Affected versions (from provided documents): rsync 2.4.6, 2.3.2, and other vers...

CVE-1999-0473

CVE-1999-0473 affects the rsync utility prior to version 2.3.1. The vulnerability allows the client’s working directory to be changed to the permissions of the directory being transferred, via rsync, as described in Red Hat and CVE records. Affected component is rsync’s transfer/permissions handl...