Privilege escalation in Samba Rsync
CVE-2002-0080
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
Vulnerability class: Privilege Escalation
EPSS: 0.005 (41.2th percentile) — read the EPSS interpretation.
Affected products
- Samba Rsync
- Redhat Linux — versions 6.2, 7.0, 7.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_XF)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE, Broken Link)
- cve@mitre.org (x_refsource_CALDERA, vendor-advisory, Broken Link)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Third Party Advisory)