CVE-2004-0792
published 2004-10-20CVE-2004-0792: Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or…
PriorityP422medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
2.32%
81.6th percentile
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| debian | rsync | < rsync 2.6.2-3 (bookworm) | rsync 2.6.2-3 (bookworm) |
| samba | rsync | >= 0 < 2.6.2-3 | 2.6.2-3 |
| samba | rsync | >= 0 < 2.6.2-3 | 2.6.2-3 |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
osv6.4MEDIUM
vendor_debian6.4MEDIUM
vendor_redhat6.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6v45-fh9q-v72q: Directory traversal vulnerability in the sanitize_path function in util
ghsa_unreviewed·2022-04-29
CVE-2004-0792 [MEDIUM] GHSA-6v45-fh9q-v72q: Directory traversal vulnerability in the sanitize_path function in util
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
OSV
CVE-2004-0792: Directory traversal vulnerability in the sanitize_path function in util
osv·2004-10-20·CVSS 6.4
CVE-2004-0792 [MEDIUM] CVE-2004-0792: Directory traversal vulnerability in the sanitize_path function in util
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Red Hat
security flaw
vendor_redhat·2004-08-12·CVSS 6.4
CVE-2004-0792 [MEDIUM] security flaw
security flaw
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Debian
CVE-2004-0792: rsync - Directory traversal vulnerability in the sanitize_path function in util.c for rs...
vendor_debian·2004·CVSS 6.4
CVE-2004-0792 [MEDIUM] CVE-2004-0792: rsync - Directory traversal vulnerability in the sanitize_path function in util.c for rs...
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Scope: local
bookworm: resolved (fixed in 2.6.2-3)
bullseye: resolved (fixed in 2.6.2-3)
forky: resolved (fixed in 2.6.2-3)
sid: resolved (fixed in 2.6.2-3)
trixie: resolved (fixed in 2.6.2-3)
No detection rules found.
No public exploits indexed.
http://marc.info/?l=bugtraq&m=109268147522290&w=2http://marc.info/?l=bugtraq&m=109277141223839&w=2http://samba.org/rsync/#security_aug04http://www.debian.org/security/2004/dsa-538http://www.gentoo.org/security/en/glsa/glsa-200408-17.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:083http://www.novell.com/linux/security/advisories/2004_26_rsync.htmlhttp://www.trustix.net/errata/2004/0042/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10561http://marc.info/?l=bugtraq&m=109268147522290&w=2http://marc.info/?l=bugtraq&m=109277141223839&w=2http://samba.org/rsync/#security_aug04http://www.debian.org/security/2004/dsa-538http://www.gentoo.org/security/en/glsa/glsa-200408-17.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:083http://www.novell.com/linux/security/advisories/2004_26_rsync.htmlhttp://www.trustix.net/errata/2004/0042/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10561
2004-10-20
Published