CVE Vulnerabilities

CVE-2004-0792

Published: Oct 20, 2004 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

Affected Software

Name Vendor Start Version End Version
Rsync Andrew_tridgell 2.3.1 2.3.1
Rsync Andrew_tridgell 2.3.2 2.3.2
Rsync Andrew_tridgell 2.3.2_1.2 2.3.2_1.2
Rsync Andrew_tridgell 2.3.2_1.2 2.3.2_1.2
Rsync Andrew_tridgell 2.3.2_1.2 2.3.2_1.2
Rsync Andrew_tridgell 2.3.2_1.2 2.3.2_1.2
Rsync Andrew_tridgell 2.3.2_1.2 2.3.2_1.2
Rsync Andrew_tridgell 2.3.2_1.2 2.3.2_1.2
Rsync Andrew_tridgell 2.3.2_1.3 2.3.2_1.3
Rsync Andrew_tridgell 2.4.0 2.4.0
Rsync Andrew_tridgell 2.4.1 2.4.1
Rsync Andrew_tridgell 2.4.3 2.4.3
Rsync Andrew_tridgell 2.4.4 2.4.4
Rsync Andrew_tridgell 2.4.5 2.4.5
Rsync Andrew_tridgell 2.4.6 2.4.6
Rsync Andrew_tridgell 2.4.8 2.4.8
Rsync Andrew_tridgell 2.5.0 2.5.0
Rsync Andrew_tridgell 2.5.1 2.5.1
Rsync Andrew_tridgell 2.5.2 2.5.2
Rsync Andrew_tridgell 2.5.3 2.5.3
Rsync Andrew_tridgell 2.5.4 2.5.4
Rsync Andrew_tridgell 2.5.5 2.5.5
Rsync Andrew_tridgell 2.5.6 2.5.6
Rsync Andrew_tridgell 2.5.7 2.5.7
Rsync Andrew_tridgell 2.6 2.6
Rsync Andrew_tridgell 2.6.1 2.6.1
Rsync Andrew_tridgell 2.6.2 2.6.2
Red Hat Enterprise Linux 3 RedHat rsync-0:2.5.7-5.3E *
Rsync Ubuntu dapper *
Rsync Ubuntu devel *
Rsync Ubuntu edgy *
Rsync Ubuntu feisty *

References