CVE-2004-0792
published 2004-10-20CVE-2004-0792: Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or…
medium6.4CVSS 3.1
AVNACLAuNCPIPAN
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| andrew_tridgell | rsync | — | — |
| debian | rsync | < rsync 2.6.2-3 (bookworm) | rsync 2.6.2-3 (bookworm) |
| samba | rsync | >= 0 < 2.6.2-3 | 2.6.2-3 |
| samba | rsync | >= 0 < 2.6.2-3 | 2.6.2-3 |
CVSS provenance
nvd6.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
osv6.4MEDIUM