| Package | Affected versions | Patched versions |
|---|---|---|
| rsync | = 2.6.0= 2.6.1= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7 |
Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free