CVE-2014-9512

2015-02-1200:00:00

ubuntu.com

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.016 Low

EPSS

Percentile

87.2%

JSON

rsync 3.1.1 allows remote attackers to write to arbitrary files via a
symlink attack on a file in the synchronization path.

Bugs

Notes

Author	Note
mdeslaur	rsync 3.1.1 introduced invalid filename filtering to prevent malicious servers from sending files outside of the specified directory: https://git.samba.org/?p=rsync.git;a=commit;h=4cad402ea8a91031f86c53961d78bb7f4f174790 CVE-2014-9512 is about malicious servers being able to bypass that filtering by changing paths. This is a security hardening feature that was added in 3.1.1. Either the whole feature needs to be backported to versions earlier than 3.1.1, or this issue doesn’t apply to them. a second commit was later added: https://git.samba.org/rsync.git/?p=rsync.git;a=commit;h=e12a6c087ca1eecdb8eae5977be239c24f4dd3d9 packages in vivid+ claim that this CVE is fixed, but are missing the second commit

Author

Note

mdeslaur

rsync 3.1.1 introduced invalid filename filtering to prevent malicious servers from sending files outside of the specified directory: https://git.samba.org/?p=rsync.git;a=commit;h=4cad402ea8a91031f86c53961d78bb7f4f174790 CVE-2014-9512 is about malicious servers being able to bypass that filtering by changing paths. This is a security hardening feature that was added in 3.1.1. Either the whole feature needs to be backported to versions earlier than 3.1.1, or this issue doesn’t apply to them. a second commit was later added: https://git.samba.org/rsync.git/?p=rsync.git;a=commit;h=e12a6c087ca1eecdb8eae5977be239c24f4dd3d9 packages in vivid+ claim that this CVE is fixed, but are missing the second commit

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchrsync< 3.0.9-1ubuntu1.1UNKNOWN
ubuntu14.04noarchrsync< 3.1.0-2ubuntu0.2UNKNOWN
ubuntu15.04noarchrsync< 3.1.1-3ubuntu0.15.04.1UNKNOWN
ubuntu15.10noarchrsync< 3.1.1-3ubuntu0.15.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	rsync	< 3.0.9-1ubuntu1.1	UNKNOWN
ubuntu	14.04	noarch	rsync	< 3.1.0-2ubuntu0.2	UNKNOWN
ubuntu	15.04	noarch	rsync	< 3.1.1-3ubuntu0.15.04.1	UNKNOWN
ubuntu	15.10	noarch	rsync	< 3.1.1-3ubuntu0.15.10.1	UNKNOWN