Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Rsync
(Samba)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 14 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2008-04-10 | CVE-2008-1720 | Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors. | Rsync | N/A | ||
| 2011-03-30 | CVE-2011-1097 | rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data. | Rsync | N/A | ||
| 2002-03-15 | CVE-2002-0080 | rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed. | Linux, Rsync | N/A | ||
| 2015-02-12 | CVE-2014-9512 | rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. | Opensuse, Solaris, Rsync | N/A |