CVE-2002-0048: Critical severity Andrew Tridgell Rsync vulnerability
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0048?
CVE-2002-0048 is considered a serious vulnerability as it allows for denial of service and potential remote code execution.
How do I fix CVE-2002-0048?
To fix CVE-2002-0048, upgrade to the latest version of rsync that addresses this vulnerability.
Which versions of rsync are affected by CVE-2002-0048?
CVE-2002-0048 affects rsync versions 2.4.6, 2.4.4, 2.4.3, 2.4.1, and earlier versions such as 2.3.2 and 2.3.1.
What attacks can be carried out using CVE-2002-0048?
Attackers may exploit CVE-2002-0048 to cause denial of service or execute arbitrary code on affected rsync clients or servers.
Is there a patch available for CVE-2002-0048?
Yes, patches have been released in newer versions of rsync to mitigate the risks associated with CVE-2002-0048.