Remotely exploitable heap overflow in rsync

Posted Dec 4, 2003 18:44 UTC (Thu) by utoddl (guest, #1232)
Parent article: Remotely exploitable heap overflow in rsync

What about versions prior to 2.5.6? The article isn't clear on that.

Posted Dec 4, 2003 19:14 UTC (Thu) by hamjudo (guest, #363) [Link] (3 responses)

All the previous versions that support the remote protocol, rsync server, are vulnerable. See rsync.samba.org for a revised announcement.

It now says
- rsync version 2.5.6 and earlier contains a heap overflow...

Posted Dec 4, 2003 20:13 UTC (Thu) by Ross (guest, #4065) [Link] (2 responses)

But it should say "contains" :)

Posted Dec 4, 2003 20:14 UTC (Thu) by Ross (guest, #4065) [Link] (1 responses)

Doh. And I meant to say "shouldn't".

Posted Dec 5, 2003 2:44 UTC (Fri) by fLameDogg (guest, #11305) [Link]

Neener ;O)