Vulnerability in Andrew_tridgell Rsync
CVE-2002-0048
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
EPSS: 0.340 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Andrew_tridgell Rsync — versions 2.3.1, 2.3.2, 2.3.2_1.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, x_refsource_ENGARDE)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SUSE, Vendor Advisory)
- cve@mitre.org (x_refsource_CALDERA, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2002-0048?
- CVE-2002-0048 is a vulnerability in Andrew_tridgell Rsync. Published 2002-02-27.
- Is CVE-2002-0048 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.