Published: 15/12/2003 Updated: 03/05/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in rsync prior to 2.5.7, when running in server mode, allows remote malicious users to execute arbitrary code and possibly escape the chroot jail.

Vulnerable Product	Search on Vulmon	Subscribe to Product
andrew tridgell rsync 2.4.4
andrew tridgell rsync 2.4.5
andrew tridgell rsync 2.5.5
andrew tridgell rsync 2.5.6
engardelinux secure community 1.0.1
engardelinux secure community 2.0
andrew tridgell rsync 2.4.1
andrew tridgell rsync 2.4.3
andrew tridgell rsync 2.5.2
andrew tridgell rsync 2.5.3
andrew tridgell rsync 2.5.4
redhat rsync 2.5.5-1
redhat rsync 2.5.5-4
andrew tridgell rsync 2.3.1
andrew tridgell rsync 2.4.6
andrew tridgell rsync 2.4.8
redhat rsync 2.4.6-2
redhat rsync 2.4.6-5
engardelinux secure linux 1.1
engardelinux secure linux 1.2
andrew tridgell rsync 2.3.2
andrew tridgell rsync 2.4.0
andrew tridgell rsync 2.5.0
andrew tridgell rsync 2.5.1
redhat rsync 2.5.4-2
engardelinux secure linux 1.5
slackware slackware linux 9.1
slackware slackware linux current
slackware slackware linux 8.1
slackware slackware linux 9.0

The rsync team has received evidence that a vulnerability in all versions of rsync prior to 257, a fast remote file copy program, was recently used in combination with a Linux kernel vulnerability to compromise the security of a public rsync server While this heap overflow vulnerability could not be used by itself to obtain root access on an rsy ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2003-398.html http://www.securityfocus.com/bid/9153 ftp://patches.sgi.com/support/free/security/advisories/20031202-01-U http://www.kb.cert.org/vuls/id/325603 http://www.osvdb.org/2898 http://secunia.com/advisories/10353 http://secunia.com/advisories/10354 http://secunia.com/advisories/10355 http://secunia.com/advisories/10356 http://secunia.com/advisories/10357 http://secunia.com/advisories/10358 http://secunia.com/advisories/10359 http://secunia.com/advisories/10360 http://secunia.com/advisories/10361 http://secunia.com/advisories/10362 http://secunia.com/advisories/10363 http://secunia.com/advisories/10364 http://secunia.com/advisories/10378 http://secunia.com/advisories/10474 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794 http://www.mandriva.com/security/advisories?name=MDKSA-2003:111 http://marc.info/?l=bugtraq&m=107055681311602&w=2 http://marc.info/?l=bugtraq&m=107056923528423&w=2 http://marc.info/?l=bugtraq&m=107055684711629&w=2 http://marc.info/?l=bugtraq&m=107055702911867&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/13899 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9415 https://www.debian.org/security/./dsa-404 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/325603

CVE-2003-0962

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect