cbcvebase.
CVE-2003-0962
published 2003-12-15

CVE-2003-0962: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
andrew_tridgellrsync
debianrsync< rsync 2.5.6-1.1 (bookworm)rsync 2.5.6-1.1 (bookworm)
engardelinuxsecure_community
engardelinuxsecure_community
engardelinuxsecure_linux
engardelinuxsecure_linux
engardelinuxsecure_linux
redhatrsync
redhatrsync
redhatrsync

CVSS provenance

nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH