CVE-2006-2083: Buffer Overflow
Published Apr 28, 2006
·Updated
Integer overflow in the receivexattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.
Affected Software
8 affected components
Andrew Tridgell Rsync=2.6.7
Andrew Tridgell Rsync=2.6.4
Andrew Tridgell Rsync=2.6.5
Andrew Tridgell Rsync=2.6.2
Andrew Tridgell Rsync=2.6.1
Andrew Tridgell Rsync=2.6.6
Andrew Tridgell Rsync=2.6.0
Andrew Tridgell Rsync=2.6.3
Event History
Apr 28, 2006
CVE Published
09:02 PM
Apr 29, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2083?
CVE-2006-2083 has a high severity rating due to the potential for arbitrary code execution by attackers.
2
How do I fix CVE-2006-2083?
To mitigate CVE-2006-2083, upgrade to rsync version 2.6.8 or later.
3
What version of rsync is affected by CVE-2006-2083?
CVE-2006-2083 affects rsync versions prior to 2.6.8, specifically versions 2.6.0 to 2.6.7.
4
What type of vulnerability is CVE-2006-2083?
CVE-2006-2083 is an integer overflow vulnerability that can lead to a buffer overflow.
5
Who can exploit CVE-2006-2083?
Attackers with the ability to send crafted extended attributes can exploit CVE-2006-2083.