rsync

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

rsync records in CISA KEV

No rsync vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rsync 3 records MEDIUM

Records

3 records in Rsync · all components

TI-2007-05915 CVE-2007-6200 · GHSA-2w9v-97wx-v5mj

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync…

MEDIUM 51

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-d…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2007-12-01 Partial fix CWE-264

TI-2007-05914 CVE-2007-6199 · GHSA-r5c5-5849-8rr9

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot…

MEDIUM 47

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of th…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04136 Published 2007-12-01 No fix listed CWE-16

TI-2007-03959 CVE-2007-4091 · GHSA-f26v-rp94-xv52

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to…

LOW 36

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03345 Published 2007-08-16 No fix listed

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0