CVE-2007-4091 Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.
MediumCVSS 6.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsync | = 2.6.9 | No fix listed |
| debian/rsync(Debian:12) | < 2.6.9-5 | 2.6.9-5 |
| debian/rsync(Debian:13) | < 2.6.9-5 | 2.6.9-5 |
| debian/rsync(Debian:14) | < 2.6.9-5 | 2.6.9-5 |
References
- article.gmane.org
- c-skills.blogspot.com
- 26493 third-party-advisory
- 26518 third-party-advisory
- 26537 third-party-advisory
- 26543 third-party-advisory
- 26548 third-party-advisory
- 26634 third-party-advisory
- 26822 third-party-advisory
- 26911 third-party-advisory
- 27896 third-party-advisory
- 61039 third-party-advisory
- GLSA-200709-13 vendor-advisory
- SSA:2007-335-01 vendor-advisory
- support.f5.com
- DSA-1360 vendor-advisory
- SUSE-SR:2007:017 vendor-advisory
- 20070823 FLEA-2007-0047-1 rsync mailing-list
- 25336 vdb-entry
- 2007-0026 vendor-advisory
- USN-500-1 vendor-advisory
- ADV-2007-2915 vdb-entry
- rsync-fname-bo(36072) vdb-entry
- issues.rpath.com
- Debian Security Tracker CVE-2007-4091 vendor-advisory
- bugs.debian.org issue-tracking