Fedora: rsync heap overflow vulnerability

    Date04 Dec 2003
    CategoryFedora
    3640
    Posted ByLinuxSecurity Advisories
    A heap overflow bug exists in rsync versions prior to 2.5.7. Onmachines where the rsync server has been enabled, a remote attackercould use this flaw to execute arbitrary code as an unprivileged user.
    
    ---------------------------------------------------------------------
    Fedora Security Update Notification
    FEDORA-2003-030
    2003-12-04
    ---------------------------------------------------------------------
    
    Name        : rsync
    Version     : 2.5.7                      
    Release     : 2                  
    Summary     : A program for synchronizing files over a network.
    Description :
    Rsync uses a reliable algorithm to bring remote and host files into
    sync very quickly. Rsync is fast because it just sends the differences
    in the files over the network instead of sending the complete
    files. Rsync is often used as a very powerful mirroring process or
    just as a more capable replacement for the rcp command. A technical
    report which describes the rsync algorithm is included in this
    package.
    
    ---------------------------------------------------------------------
    Update Information:
    
    A heap overflow bug exists in rsync versions prior to 2.5.7.  On
    machines where the rsync server has been enabled, a remote attacker
    could use this flaw to execute arbitrary code as an unprivileged user.
    The Common Vulnerabilities and Exposures project (cve.mitre.org) has
    assigned the name CAN-2003-0962 to this issue.
    
    ---------------------------------------------------------------------
    * Wed Dec 03 2003 Bill Nottingham <notting@Red Hat.com> 2.5.7-2
    
    - rebuild
    
    * Wed Dec 03 2003 Bill Nottingham <notting@Red Hat.com> 2.5.7-1
    
    - update to 2.5.7
    
    
    ---------------------------------------------------------------------
    This update can be downloaded from:
       http://download.fedora.Red Hat.com/pub/fedora/linux/core/updates/1/
    
    4e76615d1b2192be4c43d040b85ce67e  SRPMS/rsync-2.5.7-2.src.rpm
    1072294ffa8bbb37d760600093077348  i386/rsync-2.5.7-2.i386.rpm
    fa5d5ca86e6af5c15153800274443f90  i386/debug/rsync-debuginfo-2.5.7-2.i386.rpm
    
    This update can also be installed with the Update Agent; you can
    launch the Update Agent with the 'up2date' command.
    ---------------------------------------------------------------------
    
    
    
    
    
    You are not authorised to post comments.

    LinuxSecurity Poll

    Do you reuse passwords across multiple accounts?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 2 answer(s).
    /component/communitypolls/?task=poll.vote
    13
    radio
    [{"id":"55","title":"Yes","votes":"2","type":"x","order":"1","pct":100,"resources":[]},{"id":"56","title":"No","votes":"0","type":"x","order":"2","pct":0,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.