7.5

CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Andrew Tridgell ≫ Rsync Version 2.3.1
Andrew Tridgell ≫ Rsync Version 2.3.2
Andrew Tridgell ≫ Rsync Version 2.4.0
Andrew Tridgell ≫ Rsync Version 2.4.1
Andrew Tridgell ≫ Rsync Version 2.4.3
Andrew Tridgell ≫ Rsync Version 2.4.4
Andrew Tridgell ≫ Rsync Version 2.4.5
Andrew Tridgell ≫ Rsync Version 2.4.6
Andrew Tridgell ≫ Rsync Version 2.4.8
Andrew Tridgell ≫ Rsync Version 2.5.0
Andrew Tridgell ≫ Rsync Version 2.5.1
Andrew Tridgell ≫ Rsync Version 2.5.2
Andrew Tridgell ≫ Rsync Version 2.5.3
Andrew Tridgell ≫ Rsync Version 2.5.4
Andrew Tridgell ≫ Rsync Version 2.5.5
Andrew Tridgell ≫ Rsync Version 2.5.6
Redhat ≫ Rsync Version 2.4.6-2 Edition i386
Redhat ≫ Rsync Version 2.4.6-5 Edition i386
Redhat ≫ Rsync Version 2.4.6-5 Edition ia64
Redhat ≫ Rsync Version 2.5.4-2 Edition i386
Redhat ≫ Rsync Version 2.5.5-1 Edition i386
Redhat ≫ Rsync Version 2.5.5-4 Edition i386
Engardelinux ≫ Secure Community Version 1.0.1
Engardelinux ≫ Secure Community Version 2.0
Engardelinux ≫ Secure Linux Version 1.1 Edition professional
Engardelinux ≫ Secure Linux Version 1.2 Edition professional
Engardelinux ≫ Secure Linux Version 1.5 Edition professional
Slackware ≫ Slackware Linux Version 8.1
Slackware ≫ Slackware Linux Version 9.0
Slackware ≫ Slackware Linux Version 9.1
Slackware ≫ Slackware Linux Version current
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 21.16% 0.973
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://patches.sgi.com/support/free/security/advisories/20031202-01-U
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794
http://marc.info/?l=bugtraq&m=107055681311602&w=2
http://marc.info/?l=bugtraq&m=107055684711629&w=2
http://marc.info/?l=bugtraq&m=107055702911867&w=2
http://marc.info/?l=bugtraq&m=107056923528423&w=2
http://secunia.com/advisories/10353
http://secunia.com/advisories/10354
http://secunia.com/advisories/10355
http://secunia.com/advisories/10356
http://secunia.com/advisories/10357
http://secunia.com/advisories/10358
http://secunia.com/advisories/10359
http://secunia.com/advisories/10360
http://secunia.com/advisories/10361
http://secunia.com/advisories/10362
http://secunia.com/advisories/10363
http://secunia.com/advisories/10364
http://secunia.com/advisories/10378
http://secunia.com/advisories/10474
http://www.kb.cert.org/vuls/id/325603
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2003:111
http://www.osvdb.org/2898
http://www.redhat.com/support/errata/RHSA-2003-398.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9153
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13899
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9415