Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Remotely exploitable heap overflow in rsync

Posted Dec 4, 2003 18:44 UTC (Thu) by utoddl (subscriber, #1232)
Parent article: Remotely exploitable heap overflow in rsync

What about versions prior to 2.5.6? The article isn't clear on that.

(Log in to post comments)

Posted Dec 4, 2003 19:14 UTC (Thu) by hamjudo (subscriber, #363) [Link]

All the previous versions that support the remote protocol, rsync server, are vulnerable. See rsync.samba.org for a revised announcement.

It now says
- rsync version 2.5.6 and earlier contains a heap overflow...

Remotely exploitable heap overflow in rsync

Posted Dec 4, 2003 20:13 UTC (Thu) by Ross (subscriber, #4065) [Link]

But it should say "contains" :)

Remotely exploitable heap overflow in rsync

Posted Dec 4, 2003 20:14 UTC (Thu) by Ross (subscriber, #4065) [Link]

Doh. And I meant to say "shouldn't".

Remotely exploitable heap overflow in rsync

Posted Dec 5, 2003 2:44 UTC (Fri) by fLameDogg (guest, #11305) [Link]

Neener ;O)