Published: 30/03/2011 Updated: 13/02/2023

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

rsync 3.x prior to 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba rsync 3.0.5
samba rsync 3.0.0
samba rsync 3.0.3
samba rsync 3.0.2
samba rsync 3.0.7
samba rsync 3.0.4
samba rsync 3.0.1
samba rsync 3.0.6

Debian Bug report logs - #621866 rsync: CVE-2011-1097 DoS and possibly code execution on client side Package: rsync; Maintainer for rsync is Paul Slootman <paul@debianorg>; Source for rsync is src:rsync (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Sat, 9 Apr 2011 20:51:31 UTC Severity: gra ...

rsync could be made to crash or run programs as your login if it connected to a malicious server ...

CWE-119 http://securitytracker.com/id?1025256 http://www.redhat.com/support/errata/RHSA-2011-0390.html https://bugzilla.redhat.com/show_bug.cgi?id=675036 http://www.vupen.com/english/advisories/2011/0793 https://bugzilla.samba.org/show_bug.cgi?id=7936 http://www.vupen.com/english/advisories/2011/0792 http://lists.samba.org/archive/rsync/2011-January/025988.html http://rsync.samba.org/ftp/rsync/src/rsync-3.0.8-NEWS http://secunia.com/advisories/44088 http://www.mandriva.com/security/advisories?name=MDVSA-2011:066 http://secunia.com/advisories/44071 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057736.html http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057641.html http://www.vupen.com/english/advisories/2011/0876 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057737.html http://www.vupen.com/english/advisories/2011/0873 http://marc.info/?l=bugtraq&m=133226187115472&w=2 http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html http://gitweb.samba.org/?p=rsync.git%3Ba=commit%3Bh=83b94efa6b60a3ff5eee4c5f7812c617a90a03f6 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621866 https://usn.ubuntu.com/1124-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-1097

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect