CVE-2004-0426

Severity Score

9.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.

rsync anteriores a 2.6.1 no limpia adecuadamente rutas cuando ejecuta un demonio de lectura y escritura sin usar chroot, lo que permite a atacantes remotos escribir ficheros fuera de la ruta del módulo.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-04-29 CVE Reserved
2004-04-30 CVE Published
2024-08-08 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (25)

URL	Tag	Source
http://marc.info/?l=bugtraq&m=108515912212018&w=2	Mailing List
http://secunia.com/advisories/11514	Third Party Advisory
http://secunia.com/advisories/11515	Third Party Advisory
http://secunia.com/advisories/11523	Third Party Advisory
http://secunia.com/advisories/11537	Third Party Advisory
http://secunia.com/advisories/11583	Third Party Advisory
http://secunia.com/advisories/11669	Third Party Advisory
http://secunia.com/advisories/11688	Third Party Advisory
http://secunia.com/advisories/11993	Third Party Advisory
http://secunia.com/advisories/12054	Third Party Advisory
http://www.ciac.org/ciac/bulletins/o-134.shtml	Government Resource
http://www.ciac.org/ciac/bulletins/o-212.shtml	Government Resource
http://www.securityfocus.com/bid/10247	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16014	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967	Signature

URL	Date	SRC

URL	Date	SRC
http://www.debian.org/security/2004/dsa-499	2017-10-11
http://www.redhat.com/support/errata/RHSA-2004-192.html	2017-10-11

URL	Date	SRC
http://rsync.samba.org	2017-10-11
http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2004:042	2017-10-11
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.403462	2017-10-11
http://www.trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt	2017-10-11
https://access.redhat.com/security/cve/CVE-2004-0426	2004-05-19
https://bugzilla.redhat.com/show_bug.cgi?id=1617206	2004-05-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Andrew Tridgell Search vendor "Andrew Tridgell"		Rsync Search vendor "Andrew Tridgell" for product "Rsync"				<= 2.6 Search vendor "Andrew Tridgell" for product "Rsync" and version " <= 2.6"		-		Affected