|
RSync Daemon Mode Supplementary Group Privilege Vulnerability
The rsync program is used to synchronize files and directory structures across a network. It is commonly used to maintain mirrors of ftp sites, often through anonymous access to the rsync server. It is available for Linux and other Unix operating systems. rsync is usually configured to run as the root user. Under some circumstances, rsync fails to drop privileges for supplementary groups after it has been started. This is particularly the case when rsync is run from the command line using daemon mode, causing the process to inherit the group of the user that started it. In such cases, rsync does not properly drop privileges. |
|
|
Privacy Statement |
