CVE-2007-6199

NONE

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that

Published: 12/1/2007Updated: 4/9/2025

Description

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.

AI AnalysisPowered by AI

Affected Products

slackwareslackware_linux
8.1
slackwareslackware_linux
9.0
slackwareslackware_linux
9.1
slackwareslackware_linux
10.0
slackwareslackware_linux
10.1
slackwareslackware_linux
10.2
slackwareslackware_linux
11.0
slackwareslackware_linux
12.0
rsyncrsync
2.3.1
rsyncrsync
2.3.2
rsyncrsync
2.3.2_1.2alpha
rsyncrsync
2.3.2_1.2arm
rsyncrsync
2.3.2_1.2intel
rsyncrsync
2.3.2_1.2m68k
rsyncrsync
2.3.2_1.2ppc
rsyncrsync
2.3.2_1.2sparc
rsyncrsync
2.3.2_1.3
rsyncrsync
2.4.0
rsyncrsync
2.4.1
rsyncrsync
2.4.3
rsyncrsync
2.4.4
rsyncrsync
2.4.5
rsyncrsync
2.4.6
rsyncrsync
2.4.8
rsyncrsync
2.5.0
rsyncrsync
2.5.1
rsyncrsync
2.5.2
rsyncrsync
2.5.3
rsyncrsync
2.5.4
rsyncrsync
2.5.5
rsyncrsync
2.5.6
rsyncrsync
2.5.7
rsyncrsync
2.6
rsyncrsync
2.6.1
rsyncrsync
2.6.2
rsyncrsync
2.6.5
rsyncrsync
2.6.6
rsyncrsync
2.6.7
rsyncrsync
2.6.8
rsyncrsync
2.6.9

References