Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0962
HistoryDec 15, 2003 - 5:00 a.m.

CVE-2003-0962

2003-12-1505:00:00
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.379 Low

EPSS

Percentile

97.2%

JSON

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

Affected configurations

NVD
Node
andrew_tridgellrsyncMatch2.3.1
OR
andrew_tridgellrsyncMatch2.3.2
OR
andrew_tridgellrsyncMatch2.4.0
OR
andrew_tridgellrsyncMatch2.4.1
OR
andrew_tridgellrsyncMatch2.4.3
OR
andrew_tridgellrsyncMatch2.4.4
OR
andrew_tridgellrsyncMatch2.4.5
OR
andrew_tridgellrsyncMatch2.4.6
OR
andrew_tridgellrsyncMatch2.4.8
OR
andrew_tridgellrsyncMatch2.5.0
OR
andrew_tridgellrsyncMatch2.5.1
OR
andrew_tridgellrsyncMatch2.5.2
OR
andrew_tridgellrsyncMatch2.5.3
OR
andrew_tridgellrsyncMatch2.5.4
OR
andrew_tridgellrsyncMatch2.5.5
OR
andrew_tridgellrsyncMatch2.5.6
OR
redhatrsyncMatch2.4.6-2i386
OR
redhatrsyncMatch2.4.6-5i386
OR
redhatrsyncMatch2.4.6-5ia64
OR
redhatrsyncMatch2.5.4-2i386
OR
redhatrsyncMatch2.5.5-1i386
OR
redhatrsyncMatch2.5.5-4i386
OR
engardelinuxsecure_communityMatch1.0.1
OR
engardelinuxsecure_communityMatch2.0
OR
engardelinuxsecure_linuxMatch1.1professional
OR
engardelinuxsecure_linuxMatch1.2professional
OR
engardelinuxsecure_linuxMatch1.5professional
Node
slackwareslackware_linuxMatch8.1
OR
slackwareslackware_linuxMatch9.0
OR
slackwareslackware_linuxMatch9.1
OR
slackwareslackware_linuxMatchcurrent

References

Related

nessus 10
cve 1
canvas 1
openvas 6
checkpoint_advisories 1
redhat 1
debiancve 1
freebsd 1
gentoo 1
osv 1
debian 2
cvelist 1
suse 1
cert 1
nessus
nessus
SuSE-SA:2003:050: rsync
2004-07-25 00:00:00
FreeBSD : rsync buffer overflow in server mode (167)
2004-07-06 00:00:00
rsync < 2.5.7 Unspecified Remote Heap Overflow
2003-12-04 00:00:00
cve
cve
CVE-2003-0962
2003-12-15 05:00:00
canvas
canvas
Immunity Canvas: RSYNC
2003-12-15 05:00:00
openvas
openvas
Debian Security Advisory DSA 404-1 (rsync)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200312-03 (rsync)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200312-03 (rsync)
2008-09-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Rsync File Handling Integer Overflow (CVE-2003-0962)
2010-04-08 00:00:00
redhat
redhat
(RHSA-2003:399) rsync security update
2003-12-04 00:00:00
debiancve
debiancve
CVE-2003-0962
2003-12-15 05:00:00
freebsd
freebsd
rsync buffer overflow in server mode
2003-12-04 00:00:00
gentoo
gentoo
rsync: exploitable heap overflow
2003-12-04 00:00:00
osv
osv
rsync - heap overflow
2003-12-04 00:00:00
debian
debian
[SECURITY] [DSA 404-1] New rsync packages fix unauthorised remote code execution
2003-12-04 16:09:35
[SECURITY] [DSA 404-1] New rsync packages fix unauthorised remote code execution
2003-12-04 16:09:35
cvelist
cvelist
CVE-2003-0962
2003-12-10 05:00:00
suse
suse
local privilege escalation in rsync
2003-12-04 17:18:15
cert
cert
Integer overflow vulnerability in rsync
2003-12-09 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.379 Low

EPSS

Percentile

97.2%

JSON
Related for NVD:CVE-2003-0962
nessus10cve1canvas1openvas6checkpoint_advisories1redhat1debiancve1freebsd1gentoo1osv1debian2cvelist1suse1cert1