NVD

Id
58203  
Name
CVE-2007-6200  
Description
Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-01  
Modified Date
2011-08-23  
Seq
2007-6200  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298320 58203 CVE-2007-6200 APPLE-SA-2008-07-31  View
298321 58203 CVE-2007-6200 SUSE-SR:2008:001  View
298322 58203 CVE-2007-6200 http://rsync.samba.org/security.html#s3_0_0  View
298323 58203 CVE-2007-6200 1019012  View
298324 58203 CVE-2007-6200 http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257  View
298325 58203 CVE-2007-6200 MDVSA-2008:011  View
298326 58203 CVE-2007-6200 RHSA-2011:0999  View
298327 58203 CVE-2007-6200 20080212 FLEA-2008-0004-1 rsync  View
298328 58203 CVE-2007-6200 26639  View
298329 58203 CVE-2007-6200 ADV-2007-4057  View
298330 58203 CVE-2007-6200 ADV-2008-2268  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52491 JVNDB-2007-001183 rsync における隠しファイルを読込/書込される脆弱性 rsync には、書き込み可能な rsync デーモンが起動している場合に、symlink、partial-dir、backup-dir、dest オプションの扱いに不備があるため、exclude、exclude_from、filter の回避、および隠しファイルを読まれるまたは書き込まれる脆弱性が存在します。 CVE-2007-6200 29555 CVE-2007-6200 58203 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001183.html 2007-12-01 2011-08-01 View