oss-sec mailing list archives

Re: CVE Request (rsync)

From: "Steven M. Christey" <coley () linus mitre org>
Date: Thu, 10 Apr 2008 14:28:33 -0400 (EDT)


======================================================
Name: CVE-2008-1720
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1720
Reference: CONFIRM:http://rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff
Reference: CONFIRM:http://samba.anu.edu.au/rsync/security.html#s3_0_2

Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute
(xattr) support enabled, might allow remote attackers to execute
arbitrary code via unknown vectors.

Current thread:

CVE Request (rsync) Josh Bressers (Apr 08)
- Re: CVE Request (rsync) Steven M. Christey (Apr 10)