CVE-2011-1097

2011-03-3000:00:00

ubuntu.com

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

89.0%

JSON

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership
options are used, allows remote rsync servers to cause a denial of service
(heap memory corruption and application crash) or possibly execute
arbitrary code via malformed data.

Bugs

Notes

Author	Note
mdeslaur	3.0.0 and higher, so dapper and hardy are’t affected

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchrsync< 3.0.6-1ubuntu1.1UNKNOWN
ubuntu10.04noarchrsync< 3.0.7-1ubuntu1.1UNKNOWN
ubuntu10.10noarchrsync< 3.0.7-2ubuntu1.1UNKNOWN