Remote Yes

Type Access restriction bypass

Description

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

AVG-542 rsync 3.1.2-8 3.1.3pre1-1 High Fixed FS#57111

29 Jan 2018 ASA-201801-21 AVG-542 rsync High multiple issues

https://git.samba.org/?p=rsync.git;a=commitdiff;h=7706303828fcde524222babb2833864a4bd09e07