CVE-2002-0080

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2002-03-15

Last modified

2024-08-08

Weaknesses

CWE-269

Affected products

• Linux (Redhat)
• Rsync (Samba)

References

• http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt
• http://www.iss.net/security_center/static/8463.php
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3
• http://www.redhat.com/support/errata/RHSA-2002-026.html
• http://www.securityfocus.com/bid/4285