Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1097
HistoryMar 30, 2011 - 12:00 a.m.

CVE-2011-1097

2011-03-3000:00:00
ubuntu.com
ubuntu.com
9

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.9%

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership
options are used, allows remote rsync servers to cause a denial of service
(heap memory corruption and application crash) or possibly execute
arbitrary code via malformed data.

Bugs

Notes

Author Note
mdeslaur 3.0.0 and higher, so dapper and hardy are’t affected
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchrsync< 3.0.6-1ubuntu1.1UNKNOWN
ubuntu10.04noarchrsync< 3.0.7-1ubuntu1.1UNKNOWN
ubuntu10.10noarchrsync< 3.0.7-2ubuntu1.1UNKNOWN

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.9%