CVEvulnerability
CVE-2008-1720
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
Affected configurations
• samba rsync 2.6.9
• samba rsync 2.7.0
• samba rsync 2.7.1
• samba rsync 2.7.2
• samba rsync 2.7.3
• samba rsync 2.7.4
• samba rsync 2.7.5
• samba rsync 2.7.6
• samba rsync 2.7.7
• samba rsync 2.7.8
• samba rsync 2.7.9
• samba rsync 2.8.0
• samba rsync 2.8.1
• samba rsync 2.8.2
• samba rsync 2.8.3
• samba rsync 2.8.4
• samba rsync 2.8.5
• samba rsync 2.8.6
• samba rsync 2.8.7
• samba rsync 2.8.8
• samba rsync 2.8.9
• samba rsync 2.9.0
• samba rsync 2.9.1
• samba rsync 2.9.2
• samba rsync 2.9.3
• samba rsync 2.9.4
• samba rsync 2.9.5
• samba rsync 2.9.6
• samba rsync 2.9.7
• samba rsync 2.9.8
• samba rsync 2.9.9
• samba rsync 3.0.0
• samba rsync 3.0.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=125017764422557&w=2 marc.info
- http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff Patch
- http://samba.anu.edu.au/rsync/security.html#s3_0_2 Patch
- http://secunia.com/advisories/29668 secunia.com
- http://secunia.com/advisories/29770 secunia.com
- http://secunia.com/advisories/29777 secunia.com
- http://secunia.com/advisories/29781 secunia.com
- http://secunia.com/advisories/29788 secunia.com
- http://secunia.com/advisories/29856 secunia.com
- http://secunia.com/advisories/29861 secunia.com
- http://security.gentoo.org/glsa/glsa-200804-16.xml security.gentoo.org
- http://sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227 sourceforge.net
- http://www.debian.org/security/2008/dsa-1545 www.debian.org
- http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html www.mail-archive.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:084 www.mandriva.com
- http://www.osvdb.org/44368 www.osvdb.org
- http://www.osvdb.org/44369 www.osvdb.org
- http://www.securityfocus.com/bid/28726 www.securityfocus.com
- http://www.securitytracker.com/id?1019835 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1191/references www.vupen.com
- http://www.vupen.com/english/advisories/2008/1215/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41766 exchange.xforce.ibmcloud.com
- https://usn.ubuntu.com/600-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00237.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00247.html www.redhat.com
- http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=125017764422557&w=2 marc.info
- http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff Patch
- http://samba.anu.edu.au/rsync/security.html#s3_0_2 Patch
- http://secunia.com/advisories/29668 secunia.com
- http://secunia.com/advisories/29770 secunia.com
- http://secunia.com/advisories/29777 secunia.com
- http://secunia.com/advisories/29781 secunia.com
- http://secunia.com/advisories/29788 secunia.com
- http://secunia.com/advisories/29856 secunia.com
- http://secunia.com/advisories/29861 secunia.com
- http://security.gentoo.org/glsa/glsa-200804-16.xml security.gentoo.org
- http://sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227 sourceforge.net
- http://www.debian.org/security/2008/dsa-1545 www.debian.org
- http://www.mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html www.mail-archive.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:084 www.mandriva.com
- http://www.osvdb.org/44368 www.osvdb.org
- http://www.osvdb.org/44369 www.osvdb.org
- http://www.securityfocus.com/bid/28726 www.securityfocus.com
- http://www.securitytracker.com/id?1019835 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1191/references www.vupen.com
- http://www.vupen.com/english/advisories/2008/1215/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41766 exchange.xforce.ibmcloud.com
- https://usn.ubuntu.com/600-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00237.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00247.html www.redhat.com