Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

Gentoo GLSA-200605-05 Warning: Risk of Rsync Buffer Overflow Attack

gentoo
Calendar Grey May 6, 2006
Dist Gentoo Esm H88
Gentoo GLSA 202105-10 alerts users to a critical buffer overflow in tar. Immediate patching necessary to avert potential system compromise.
An attacker having write access to an rsync module might be able to execute arbitrary code on an rsync server.

Summary

Gentoo Linux Security Advisory GLSA 200605-05 https://security.gentoo.org/ Severity: High Title: rsync: Potential integer overflow Date: May 06, 2006 Bugs: #131631 ID: 200605-05

Synopsis ======= An attacker having write access to an rsync module might be able to execute arbitrary code on an rsync server.
Background ========= rsync is a server and client utility that provides fast incremental file transfers. It is used to efficiently synchronize files between hosts and is used by emerge to fetch Gentoo's Portage tree.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/rsync < 2.6.8 >= 2.6.8
========== An integer overflow was found in the receive_...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here