CVE-1999-0473: Low severity Andrew Tridgell Rsync vulnerability
Published Apr 7, 1999
·Updated
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
Affected Software
1 affected component
Andrew Tridgell Rsync<=2.3.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rsyncto a version that resolves this vulnerability.Fixed in 2.3.1
Event History
Apr 7, 1999
CVE Published
04:00 AM
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Sep 29, 1999
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-1999-0473?
CVE-1999-0473 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-1999-0473?
To mitigate CVE-1999-0473, upgrade rsync to version 2.3.1 or later.
3
What does CVE-1999-0473 affect?
CVE-1999-0473 affects rsync versions prior to 2.3.1.
4
What is the impact of CVE-1999-0473?
The impact of CVE-1999-0473 is that it may unintentionally change the permissions of the client's working directory.
5
Is CVE-1999-0473 known to be exploited?
There are no public reports of CVE-1999-0473 being actively exploited.