Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-600-1
HistoryApr 11, 2008 - 12:00 a.m.

rsync vulnerability

2008-04-1100:00:00
ubuntu.com
26

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.072 Low

EPSS

Percentile

94.0%

JSON

Releases

  • Ubuntu 7.10
  • Ubuntu 7.04

Packages

  • rsync -

Details

Sebastian Krahmer discovered that rsync could overflow when handling ACLs.
An attacker could construct a malicious set of files that when processed
by rsync could lead to arbitrary code execution or a crash.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchrsync<Β 2.6.9-5ubuntu1.1UNKNOWN
Ubuntu7.04noarchrsync<Β 2.6.9-3ubuntu1.2UNKNOWN

Related

openvas 12
nessus 7
securityvulns 3
cve 1
ubuntucve 1
prion 1
gentoo 1
debiancve 1
seebug 1
debian 1
f5 2
openvas
openvas
Fedora Update for rsync FEDORA-2008-3060
2009-02-17 00:00:00
Mandriva Update for rsync MDVSA-2008:084 (rsync)
2009-04-09 00:00:00
Gentoo Security Advisory GLSA 200804-16 (rsync)
2008-09-24 00:00:00
nessus
nessus
Ubuntu 7.04 / 7.10 : rsync vulnerability (USN-600-1)
2008-04-17 00:00:00
openSUSE 10 Security Update : rsync (rsync-5207)
2008-05-01 00:00:00
GLSA-200804-16 : rsync: Execution of arbitrary code
2008-04-22 00:00:00
securityvulns
securityvulns
rsync integer overflow
2008-04-14 00:00:00
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
2008-04-14 00:00:00
[security bulletin] HPSBMA02447 SSRT090062 rev.1 - Insight Control Suite For Linux &#40;ICE-LX&#41; Cross Site Request Forgery &#40;CSRF&#41; , Remote Execution of Arbitrary Code, Denial of Service &#40;DoS&#41;, and Other Vulnerabilities
2009-08-14 00:00:00
cve
cve
CVE-2008-1720
2008-04-10 19:05:00
ubuntucve
ubuntucve
CVE-2008-1720
2008-04-10 00:00:00
prion
prion
Buffer overflow
2008-04-10 19:05:00
gentoo
gentoo
rsync: Execution of arbitrary code
2008-04-17 00:00:00
debiancve
debiancve
CVE-2008-1720
2008-04-10 19:05:00
seebug
seebug
Rsync xattrζ”―ζŒζ•΄ζ•°ζΊ’ε‡ΊζΌζ΄ž
2008-04-15 00:00:00
debian
debian
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
2008-04-10 21:12:16
f5
f5
K15604 : Multiple rsync vulnerabilities
2014-09-18 00:00:00
SOL15604 - Multiple rsync vulnerabilities
2014-09-18 00:00:00

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.072 Low

EPSS

Percentile

94.0%

JSON
Related for USN-600-1
openvas12nessus7securityvulns3cve1ubuntucve1prion1gentoo1debiancve1seebug1debian1f52