CVE-2003-0962
Fixed in a distro release EPSS 24%
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
Products: andrew_tridgell rsync, redhat rsync, engardelinux secure_community, engardelinux secure_linux, slackware_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rsync | 2.5.6-1.1 |
| Debian 13 | rsync | 2.5.6-1.1 |
| Debian 14 | rsync | 2.5.6-1.1 |
| Debian 3.0 | rsync | 2.5.5-0.2 |
| Red Hat Enterprise Linux 3 | rsync | 0:2.5.7-1 |
| Red Hat Enterprise Linux 3 | rsync-debuginfo | 0:2.5.7-1 |