Lucene search

K
f5F5F5:K15548
HistoryApr 29, 2015 - 12:00 a.m.

K15548 : Rsync sender.c vulnerability CVE-2007-4091

2015-04-2900:00:00
my.f5.com
14

AI Score

7.1

Confidence

Low

EPSS

0.181

Percentile

96.2%

Security Advisory Description

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function. (CVE-2007-4091)

Impact

There is no impact; F5 products are not affected by this vulnerability.

Note: This article previously indicated that BIG-IP, BIG-IQ, and Enterprise Manager were affected by this vulnerability. However, F5 Product Development has subsequently determined that no F5 products are affected by this vulnerability.