Vulnerabilities > Andrew Tridgell > Rsync > 2.3.2

DATE CVE VULNERABILITY TITLE RISK
2004-10-20 CVE-2004-0792 Unspecified vulnerability in Andrew Tridgell Rsync
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
network
low complexity
andrew-tridgell
6.4
2003-12-15 CVE-2003-0962 Remote Heap Overflow vulnerability in RSync Daemon Mode Undisclosed
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
network
low complexity
andrew-tridgell redhat engardelinux slackware
7.5
2002-02-27 CVE-2002-0048 Remote Code Execution vulnerability in rsync Signed Array Index
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
network
low complexity
andrew-tridgell
critical
10.0