CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-12-15

Last modified

2024-08-08

Affected products

• Rsync (Andrew Tridgell)
• Secure Community (Engardelinux)
• Secure Linux (Engardelinux)
• Rsync (Redhat)
• Slackware Linux (Slackware)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794
• http://marc.info/?l=bugtraq&m=107055681311602&w=2
• http://marc.info/?l=bugtraq&m=107055684711629&w=2
• http://marc.info/?l=bugtraq&m=107055702911867&w=2
• http://marc.info/?l=bugtraq&m=107056923528423&w=2
• http://secunia.com/advisories/10353
• http://secunia.com/advisories/10354
• http://secunia.com/advisories/10355
• http://secunia.com/advisories/10356
• http://secunia.com/advisories/10357
• http://secunia.com/advisories/10358
• http://secunia.com/advisories/10359
• http://secunia.com/advisories/10360
• http://secunia.com/advisories/10361
• http://secunia.com/advisories/10362
• http://secunia.com/advisories/10363
• http://secunia.com/advisories/10364
• http://secunia.com/advisories/10378
• http://secunia.com/advisories/10474
• http://www.kb.cert.org/vuls/id/325603
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:111
• http://www.osvdb.org/2898
• http://www.redhat.com/support/errata/RHSA-2003-398.html
• http://www.securityfocus.com/bid/9153
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13899
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9415