1. CVE-Search
  2. CVE-2002-0048
ID CVE-2002-0048
Summary Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
References
Vulnerable Configurations
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:alpha:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:alpha:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:arm:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:arm:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:intel:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:intel:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:m68k:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:m68k:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:ppc:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:ppc:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:sparc:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:sparc:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.5.0_1:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.5.0_1:*:*:*:*:*:*:*
  • cpe:2.3:a:andrew_tridgell:rsync:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:andrew_tridgell:rsync:2.5.1:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 18-10-2016 - 02:15)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
redhat via4
advisories
rhsa
id RHSA-2002:018
refmap via4
bid 3958
bugtraq
  • 20020127 rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available)
  • 20020128 TSLSA-2002-0025 - rsync
caldera CSSA-2002-003.0
cert-vn VU#800635
conectiva CLA-2002:458
debian DSA-106
engarde ESA-20020125-004
freebsd FreeBSD-SA-02:10
hp HPSBTL0201-022
mandrake MDKSA-2002:009
suse SuSE-SA:2002:004
xf linux-rsync-root-access(7993)
Last major update 18-10-2016 - 02:15
Published 27-02-2002 - 05:00
Last modified 18-10-2016 - 02:15
Back to Top