Lucene search

K
ubuntuUbuntuUSN-1124-1
HistoryApr 27, 2011 - 12:00 a.m.

rsync vulnerability

2011-04-2700:00:00
ubuntu.com
33

9.8 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.9%

Releases

  • Ubuntu 10.10
  • Ubuntu 10.04
  • Ubuntu 9.10

Packages

  • rsync - fast remote file copy program (like rcp)

Details

It was discovered that rsync incorrectly handled memory when certain
recursion, deletion and ownership options were used. If a user were tricked
into connecting to a malicious server, a remote attacker could cause a
denial of service or execute arbitrary code with privileges of the user
invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchrsync< 3.0.6-1ubuntu1.1UNKNOWN
Ubuntu10.10noarchrsync< 3.0.7-2ubuntu1.1UNKNOWN
Ubuntu10.04noarchrsync< 3.0.7-1ubuntu1.1UNKNOWN

9.8 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.9%