CVE-2004-0792: Medium severity Andrew Tridgell Rsync vulnerability
Published Aug 18, 2004
·Updated
Directory traversal vulnerability in the sanitizepath function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Affected Software
27 affected components
Andrew Tridgell Rsync=2.3.1
Andrew Tridgell Rsync=2.3.2
Andrew Tridgell Rsync=2.3.2_1.2
Andrew Tridgell Rsync=2.3.2_1.2
Andrew Tridgell Rsync=2.3.2_1.2
Andrew Tridgell Rsync=2.3.2_1.2
Andrew Tridgell Rsync=2.3.2_1.2
Andrew Tridgell Rsync=2.3.2_1.2
Andrew Tridgell Rsync=2.3.2_1.3
Andrew Tridgell Rsync=2.4.0
Andrew Tridgell Rsync=2.4.1
Andrew Tridgell Rsync=2.4.3
Andrew Tridgell Rsync=2.4.4
Andrew Tridgell Rsync=2.4.5
Andrew Tridgell Rsync=2.4.6
Andrew Tridgell Rsync=2.4.8
Andrew Tridgell Rsync=2.5.0
Andrew Tridgell Rsync=2.5.1
Andrew Tridgell Rsync=2.5.2
Andrew Tridgell Rsync=2.5.3
Andrew Tridgell Rsync=2.5.4
Andrew Tridgell Rsync=2.5.5
Andrew Tridgell Rsync=2.5.6
Andrew Tridgell Rsync=2.5.7
Andrew Tridgell Rsync=2.6
Andrew Tridgell Rsync=2.6.1
Andrew Tridgell Rsync=2.6.2
Remediation
Patch Available
Patch Available
Event History
Aug 18, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0792?
CVE-2004-0792 is classified as a high severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2004-0792?
To fix CVE-2004-0792, update rsync to version 2.6.3 or later, where the vulnerability has been addressed.
3
What software is affected by CVE-2004-0792?
Rsync versions 2.6.2 and earlier are affected by CVE-2004-0792.
4
What type of vulnerability is CVE-2004-0792?
CVE-2004-0792 is a directory traversal vulnerability that allows attackers to access restricted files.
5
Can CVE-2004-0792 allow attackers to write files?
Yes, CVE-2004-0792 can allow attackers to both read and write certain files due to improper path sanitization.