Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

rsync: integer overflow

Package(s):

rsync

CVE #(s):

CVE-2006-2083

Created:

May 8, 2006

Updated:

June 6, 2006

Description:

An integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.

Alerts:

Fedora	FEDORA-2006-599	2006-06-05
Fedora	FEDORA-2006-601	2006-06-05
Gentoo	200605-05	2006-05-06

(Log in to post comments)