10
CVSSv2

CVE-2007-6200

Published: 01/12/2007 Updated: 15/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Unspecified vulnerability in rsync prior to 3.0.0pre6, when running a writable rsync daemon, allows remote malicious users to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Vulnerable Product Search on Vulmon Subscribe to Product

rsync rsync 2.3.2

rsync rsync 2.3.2_1.2alpha

rsync rsync 2.4.0

rsync rsync 2.4.1

rsync rsync 2.5.1

rsync rsync 2.5.2

rsync rsync 2.6.2

rsync rsync 2.3.2_1.2m68k

rsync rsync 2.3.2_1.2ppc

rsync rsync 2.4.5

rsync rsync 2.3.2_1.2arm

rsync rsync 2.3.2_1.2intel

rsync rsync 2.4.3

rsync rsync 2.4.4

rsync rsync 2.5.3

rsync rsync 2.5.4

rsync rsync 2.5.5

rsync rsync 2.6.6

rsync rsync 2.6.7

rsync rsync 2.3.1

rsync rsync 2.3.2_1.2sparc

rsync rsync 2.3.2_1.3

rsync rsync 2.4.8

rsync rsync 2.5.0

rsync rsync 2.6

rsync rsync 2.6.1

rsync rsync 2.4.6

rsync rsync 2.5.6

rsync rsync 2.5.7

rsync rsync 2.6.8

rsync rsync 2.6.9

rsync rsync 2.6.5

Vendor Advisories

Debian Bug report logs - #453652 rsync: CVE-2007-6199, CVE-2007-6200 insecure handling of temporary files Package: rsync; Maintainer for rsync is Paul Slootman <paul@debianorg>; Source for rsync is src:rsync (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Fri, 30 Nov 2007 12:09:02 UTC Severity ...