CVE-2004-0426
Fixed in a distro release EPSS 3%
rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.
Products: andrew_tridgell rsync
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rsync | 2.6.1-1 |
| Debian 13 | rsync | 2.6.1-1 |
| Debian 14 | rsync | 2.6.1-1 |
| Debian 3.0 | rsync | 2.5.5-0.5 |
| Red Hat Enterprise Linux 3 | rsync | 0:2.5.7-4.3E |
| Red Hat Enterprise Linux 3 | rsync-debuginfo | 0:2.5.7-4.3E |