CVE-2004-0426

概要

参考情報

• marc.info
• rsync.samba.org · Vendor Advisory
• secunia.com/advisories/11514
• secunia.com/advisories/11515
• secunia.com/advisories/11523
• secunia.com/advisories/11537
• secunia.com/advisories/11583
• secunia.com/advisories/11669
• secunia.com/advisories/11688
• secunia.com/advisories/11993
• secunia.com/advisories/12054
• ciac.org/ciac/bulletins/o-134.shtml
• ciac.org/ciac/bulletins/o-212.shtml
• debian.org/security/2004/dsa-499 · Patch
• gentoo.org/security/en/glsa/glsa-200407-10.xml
• mandriva.com/security/advisories
• redhat.com/support/errata/RHSA-2004-192.html · Patch
• securityfocus.com/bid/10247
• slackware.org/security/viewer.php
• trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt
• exchange.xforce.ibmcloud.com/vulnerabilities/16014
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967

rsync のその他の脆弱性

• CVE-2006-2083高 7.5Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to ex…
• CVE-2004-0792中 6.4Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attac…
• CVE-2003-0962高 7.5Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibl…
• CVE-2002-0048緊急 10.0Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote a…
• CVE-1999-0473低 2.1The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the di…