• info
• discussion
• exploit
• solution
• references

RSync Daemon Mode Supplementary Group Privilege Vulnerability

Solution:
Upgrades are available.


rsync rsync 2.4.1

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.4.3

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.4.4

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.4.5

• Caldera rsync-2.5.0-5.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ rsync-2.5.0-5.i386.rpm


• Caldera rsync-2.5.0-5.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/rsync-2.5.0-5.i386.rpm


• Caldera rsync-2.5.0-5.src.rpm
  Source RPM.
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/SRPMS /rsync-2.5.0-5.src.rpm


• Caldera rsync-2.5.0-5.src.rpm
  Source RPM.
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ SRPMS/rsync-2.5.0-5.src.rpm


• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.4.6

• Mandrake rsync-2.5.4-1.1mdk.i586.rpm
  Mandrake Linux 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.i586.rpm
  Mandrake Linux 8.0.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.i586.rpm
  Mandrake Linux 8.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.i586.rpm
  Mandrake Single Network Firewall 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.ia64.rpm
  Mandrake Linux 8.1 ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.ppc.rpm
  Mandrake Linux 8.0 PPC.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.src.rpm
  Mandrake Linux 7.2 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.src.rpm
  Mandrake Linux 8.0 PPC Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.src.rpm
  Mandrake Linux 8.0 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.src.rpm
  Mandrake Linux 8.1 ia64 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.src.rpm
  Mandrake Linux 8.1 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.1mdk.src.rpm
  Mandrake Single Network Firewall 7.2 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.2mdk.i586.rpm
  Mandrake Corporate Server 1.0.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.2mdk.i586.rpm
  Mandrake Linux 7.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.2mdk.src.rpm
  Mandrake Corporate Server 1.0.1 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake rsync-2.5.4-1.2mdk.src.rpm
  Mandrake Linux 7.1 Source RPM.
  http://www.mandrakesecure.net/en/ftp.php


• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.4.8

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.5 .0

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.5.1

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html

rsync rsync 2.5.2

• rsync rsync 2.5.4
  http://samba.anu.edu.au/rsync/download.html