Categorie: Vulnerability Posted: 2003-12-06 by ReCall Views: 452 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in rsync. A remote user can execute arbitrary code on the target system.
It is reported that a remote user can connect to a target server running rsync on TCP port 873 and send specially crafted data to execute arbitrary code. The code will run with the privileges of the rsync daemon.
Only systems that are running rsync in daemon mode are reportedly affected.
: Impact: A remote user can execute arbitrary code with the privileges of the rsync daemon.
Solution: The vendor has released a fixed version (2.5.7) and also a patch for 2.5.6, available at:
