PatchTheCVEandrew tridgell vulnerabilities
Recent CVEs affecting andrew tridgell products. 5 tracked.
andrew tridgell has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-04-28. Highest priority: CVE-2002-0048 (score 65/100).
- CVE-2006-2083 HIGH 7.5 DOWNGRADE Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6
- CVE-2004-0792 MEDIUM 6.4 DOWNGRADE Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when ch
- CVE-2004-0426 MEDIUM 5.0 UPGRADE rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, whi
- CVE-2003-0962 HIGH 7.5 DOWNGRADE DOWNGRADE Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to exec
- CVE-2002-0048 HIGH 10.0 DOWNGRADE Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and
FAQ
How do I fix andrew tridgell vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is andrew tridgell being exploited right now?
None of the tracked andrew tridgell CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which andrew tridgell CVE should I patch first?
CVE-2002-0048 currently ranks highest (65/100): Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and.