Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo GLSA-200605-05 Warning: Risk of Rsync Buffer Overflow Attack

gentoo
Calendar Grey May 6, 2006
Scroller Gentoo
Gentoo GLSA 202105-10 alerts users to a critical buffer overflow in tar. Immediate patching necessary to avert potential system compromise.
An attacker having write access to an rsync module might be able to execute arbitrary code on an rsync server.

Summary

Gentoo Linux Security Advisory GLSA 200605-05 https://security.gentoo.org/ Severity: High Title: rsync: Potential integer overflow Date: May 06, 2006 Bugs: #131631 ID: 200605-05

Synopsis ======= An attacker having write access to an rsync module might be able to execute arbitrary code on an rsync server.
Background ========= rsync is a server and client utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/rsync < 2.6.8 >= 2.6.8
========== An integer overflow was found in the receive_...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo high severity buffer overflow remote code execution rsync integer overflow

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity buffer overflow remote code execution rsync integer overflow

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround