CVE-2003-0962
NoneCVSS
—
EPSS
23.5%
Published
Dec 15, 2003
CISA due date
—
The record
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | rsync | 0 | 2.5.6-1.1 |
| Debian:12 | rsync | 0 | 2.5.6-1.1 |
| Debian:13 | rsync | 0 | 2.5.6-1.1 |
| Debian:3.0 | rsync | 0 | 2.5.5-0.2 |
| Red Hat:enterprise_linux:3::as | rsync | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::as | rsync-debuginfo | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::desktop | rsync | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::desktop | rsync-debuginfo | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::es | rsync | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::es | rsync-debuginfo | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::ws | rsync | 0 | 0:2.5.7-1 |
| Red Hat:enterprise_linux:3::ws | rsync-debuginfo | 0 | 0:2.5.7-1 |
Related vulnerabilities
- CVE-2024-12084 A heap-based buffer overflow flaw was found in the rsync daemon. Also affects rsync
- CVE-2024-12086 A flaw was found in rsync. Also affects rsync
- CVE-2024-12085 A flaw was found in rsync which could be triggered when rsync compares file checksums. Also affects rsync
- CVE-2024-12087 A path traversal vulnerability exists in rsync. Also affects rsync
- CVE-2024-12088 A flaw was found in rsync. Also affects rsync
- CVE-2024-12747 A flaw was found in rsync. Also affects rsync
- CVE-2017-17433 The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development… Also affects rsync
- CVE-2017-16548 The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not… Also affects rsync