CVE-2007-4091: Medium severity rsync rsync vulnerability
Published Aug 16, 2007
·Updated
Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the fname function.
Affected Software
1 affected component
rsync rsync=2.6.9
Event History
Aug 16, 2007
CVE Published
12:17 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4091?
CVE-2007-4091 has been classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-4091?
To fix CVE-2007-4091, update rsync to a version later than 2.6.9 where the vulnerabilities have been patched.
3
What versions of rsync are affected by CVE-2007-4091?
CVE-2007-4091 specifically affects rsync version 2.6.9.
4
Can CVE-2007-4091 be exploited remotely?
Yes, CVE-2007-4091 can be exploited remotely by attackers through specially crafted directory names.
5
What potential impact does CVE-2007-4091 have on a system?
The potential impact of CVE-2007-4091 includes arbitrary code execution, which can lead to full system compromise.