rsync - remotely exploitable heap overflow [LWN.net]

Package(s):

rsync

CVE #(s):

CAN-2003-0962

Created:

December 4, 2003

Updated:

March 3, 2004

Description:

An advisory has gone out warning of a remotely exploitable heap overflow vulnerability in rsync versions 2.5.6 and prior. If you are running an rsync server, you will want to apply a distributor patch or upgrade to 2.5.7 in the near future.

Alerts:

SCO Group	CSSA-2004-010.0	2004-03-02
Immunix	IMNX-2003-73-001-01	2003-12-05
Mandrake	MDKSA-2003:111	2003-12-04
Red Hat	RHSA-2003:399-01	2003-12-04
Red Hat	RHSA-2003:398-01	2003-12-04
Fedora	FEDORA-2003-030	2003-12-04
Conectiva	CLA-2003:794	2003-12-04
Gentoo	200312-03	2003-12-04
EnGarde	ESA-20031204-032	2003-12-04
Debian	DSA-404-1	2003-12-04
OpenPKG	OpenPKG-SA-2003.051	2003-12-04
SuSE	SuSE-SA:2003:050	2003-12-04
Trustix	2003-0048	2003-12-04
Slackware	SSA:2003-337-01	2003-12-03

(Log in to post comments)