Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Rsync Daemon Excludes Multiple File Access Vulnerabilities

The 'rsync' daemon is prone to multiple file-access vulnerabilities because it fails to properly validate 'exclude'-type options set in the daemon's configuration file 'rsyncd.conf'.

Attackers can exploit these issues to read sensitive information or overwrite files with writable permissions.







 

Privacy Statement
Copyright 2009, SecurityFocus