7.5
CVE-2006-2083
- EPSS 1.51%
- Published 28.04.2006 21:02:00
- Last modified 03.04.2025 01:03:51
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.
Data is provided by the National Vulnerability Database (NVD)
Andrew Tridgell ≫ Rsync Version2.6.0
Andrew Tridgell ≫ Rsync Version2.6.1
Andrew Tridgell ≫ Rsync Version2.6.2
Andrew Tridgell ≫ Rsync Version2.6.3
Andrew Tridgell ≫ Rsync Version2.6.4
Andrew Tridgell ≫ Rsync Version2.6.5
Andrew Tridgell ≫ Rsync Version2.6.6
Andrew Tridgell ≫ Rsync Version2.6.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.51% | 0.794 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|