VendorsAndrew Tridgellrsync2.5.4
Vulnerabilities

Andrew Tridgell Rsync 2.5.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2003-0962
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
Published 2003-12-10 · Modified
7.5EPSS 0.212
CVE-2004-0792
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
Published 2004-08-18 · Modified
6.4EPSS 0.023