Gentoo GLSA-200408-17 Normal: Rsync Information Leak Risk Assessment

Gentoo Linux Security Advisory GLSA 200408-17 https://security.gentoo.org/ Severity: Normal Title: rsync: Potential information leakage Date: August 17, 2004 Bugs: #60309 ID: 200408-17

Synopsis ======= rsync fails to properly sanitize paths. This vulnerability could allow the listing of arbitrary files and allow file overwriting outside module's path on rsync server configurations that allow uploading.
Background ========= rsync is a utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree. rsyncd is the rsync daemon, which listens to connections from rsync clients.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected -------------------------...