Design/Logic Flaw

2007-12-0106:46:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

JSON

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

CPENameOperatorVersion
rsynceq2.3.1
rsynceq2.3.2
rsynceq2.3.2-1.2alpha
rsynceq2.3.2-1.2arm
rsynceq2.3.2-1.2intel
rsynceq2.3.2-1.2m68k
rsynceq2.3.2-1.2ppc
rsynceq2.3.2-1.2sparc
rsynceq2.3.2-1.3
rsynceq2.4.0

Name	Operator	Version
rsync	eq	2.3.1
rsync	eq	2.3.2
rsync	eq	2.3.2-1.2alpha
rsync	eq	2.3.2-1.2arm
rsync	eq	2.3.2-1.2intel
rsync	eq	2.3.2-1.2m68k
rsync	eq	2.3.2-1.2ppc
rsync	eq	2.3.2-1.2sparc
rsync	eq	2.3.2-1.3
rsync	eq	2.4.0