cbcvebase.
CVE-2007-6200
published 2007-12-01

CVE-2007-6200: Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter…

critical10CVSS 3.1
AVNACLAuNCCICAC
Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Affected

37 ranges· showing 25
VendorProductVersion rangeFixed in
debianrsync< rsync 2.6.9-6 (bookworm)rsync 2.6.9-6 (bookworm)
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync
rsyncrsync

CVSS provenance

nvd10.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL