7.5

CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Andrew Tridgell ≫ Rsync Version2.3.1
Andrew Tridgell ≫ Rsync Version2.3.2
Andrew Tridgell ≫ Rsync Version2.4.0
Andrew Tridgell ≫ Rsync Version2.4.1
Andrew Tridgell ≫ Rsync Version2.4.3
Andrew Tridgell ≫ Rsync Version2.4.4
Andrew Tridgell ≫ Rsync Version2.4.5
Andrew Tridgell ≫ Rsync Version2.4.6
Andrew Tridgell ≫ Rsync Version2.4.8
Andrew Tridgell ≫ Rsync Version2.5.0
Andrew Tridgell ≫ Rsync Version2.5.1
Andrew Tridgell ≫ Rsync Version2.5.2
Andrew Tridgell ≫ Rsync Version2.5.3
Andrew Tridgell ≫ Rsync Version2.5.4
Andrew Tridgell ≫ Rsync Version2.5.5
Andrew Tridgell ≫ Rsync Version2.5.6
Redhat ≫ Rsync Version2.4.6-2 Editioni386
Redhat ≫ Rsync Version2.4.6-5 Editioni386
Redhat ≫ Rsync Version2.4.6-5 Editionia64
Redhat ≫ Rsync Version2.5.4-2 Editioni386
Redhat ≫ Rsync Version2.5.5-1 Editioni386
Redhat ≫ Rsync Version2.5.5-4 Editioni386
Engardelinux ≫ Secure Community Version1.0.1
Engardelinux ≫ Secure Linux Version1.1 Editionprofessional
Engardelinux ≫ Secure Linux Version1.2 Editionprofessional
Engardelinux ≫ Secure Linux Version1.5 Editionprofessional
Slackware ≫ Slackware Linux Version8.1
Slackware ≫ Slackware Linux Version9.0
Slackware ≫ Slackware Linux Version9.1
Slackware ≫ Slackware Linux Versioncurrent
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 41.87% 0.973
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P