NVD

Id
70873  
Name
CVE-2004-0426  
Description
rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-07-07  
Modified Date
2017-07-10  
Seq
2004-0426  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365679 70873 CVE-2004-0426 20040521 [OpenPKG-SA-2004.025] OpenPKG Security Advisory (rsync)  View
365680 70873 CVE-2004-0426 oval:org.mitre.oval:def:9495  View
365681 70873 CVE-2004-0426 oval:org.mitre.oval:def:967  View
365682 70873 CVE-2004-0426 http://rsync.samba.org/  View
365683 70873 CVE-2004-0426 O-134  View
365684 70873 CVE-2004-0426 O-212  View
365685 70873 CVE-2004-0426 DSA-499  View
365686 70873 CVE-2004-0426 GLSA-200407-10  View
365687 70873 CVE-2004-0426 MDKSA-2004:042  View
365688 70873 CVE-2004-0426 RHSA-2004:192  View
365689 70873 CVE-2004-0426 10247  View
365690 70873 CVE-2004-0426 SSA:2004-124-01  View
365691 70873 CVE-2004-0426 TSL-2004-0024  View
365692 70873 CVE-2004-0426 rsync-write-files(16014)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62821 JVNDB-2004-000163 rsync の不適切なパス解析によるアクセスコントロール回避の脆弱性 rsync には、パスのサニタイズ処理の不備のため、アクセス制限を回避可能な脆弱性が存在します。 CVE-2004-0426 8853 CVE-2004-0426 70873 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000163.html 2004-04-26 2007-04-01 View