CVE-2004-0792
Fixed in a distro release EPSS 2%
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Products: andrew_tridgell rsync
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rsync | 2.6.2-3 |
| Debian 13 | rsync | 2.6.2-3 |
| Debian 14 | rsync | 2.6.2-3 |
| Debian 3.0 | rsync | 2.5.5-0.6 |
| Red Hat Enterprise Linux 3 | rsync | 0:2.5.7-5.3E |
| Red Hat Enterprise Linux 3 | rsync-debuginfo | 0:2.5.7-5.3E |