CVEvulnerability

CVE-2003-0962

7.5 HIGH Published 2003-12-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

Affected configurations

• andrew tridgell rsync 2.3.1 • andrew tridgell rsync 2.3.2 • andrew tridgell rsync 2.4.0 • andrew tridgell rsync 2.4.1 • andrew tridgell rsync 2.4.3 • andrew tridgell rsync 2.4.4 • andrew tridgell rsync 2.4.5 • andrew tridgell rsync 2.4.6 • andrew tridgell rsync 2.4.8 • andrew tridgell rsync 2.5.0 • andrew tridgell rsync 2.5.1 • andrew tridgell rsync 2.5.2 • andrew tridgell rsync 2.5.3 • andrew tridgell rsync 2.5.4 • andrew tridgell rsync 2.5.5 • andrew tridgell rsync 2.5.6 • redhat rsync 2.4.6-2 • redhat rsync 2.4.6-5 • redhat rsync 2.5.4-2 • redhat rsync 2.5.5-1 • redhat rsync 2.5.5-4 • engardelinux secure community 1.0.1 • engardelinux secure community 2.0 • engardelinux secure linux 1.1 • engardelinux secure linux 1.2 • engardelinux secure linux 1.5 • slackware slackware linux 8.1 • slackware slackware linux 9.0 • slackware slackware linux 9.1 • slackware slackware linux current

References