CVE-2002-0048 Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary....
HighCVSS 10.0
EPSS 34.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| andrew tridgell rsync | = 2.3.1 | No fix listed |
| andrew tridgell rsync | = 2.3.2 | No fix listed |
| andrew tridgell rsync | = 2.3.2_1.2 | No fix listed |
| andrew tridgell rsync | = 2.4.1 | No fix listed |
| andrew tridgell rsync | = 2.4.3 | No fix listed |
| andrew tridgell rsync | = 2.4.4 | No fix listed |
| andrew tridgell rsync | = 2.4.6 | No fix listed |
| andrew tridgell rsync | = 2.5.0_1 | No fix listed |
| andrew tridgell rsync | = 2.5.1 | No fix listed |
References
- CLA-2002:458 vendor-advisory
- SuSE-SA:2002:004 patch vendor-advisory
- 20020128 TSLSA-2002-0025 - rsync mailing-list
- 20020127 rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available) mailing-list
- HPSBTL0201-022 vendor-advisory
- CSSA-2002-003.0 vendor-advisory
- DSA-106 patch vendor-advisory
- linux-rsync-root-access(7993) vdb-entry
- VU#800635 third-party-advisory us-government-resource
- MDKSA-2002:009 vendor-advisory
- ESA-20020125-004 vendor-advisory
- RHSA-2002:018 vendor-advisory
- 3958 patch vdb-entry vendor-advisory