// For flags

CVE-2007-4091

 

Severity Score

6.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.

Múltiples errores de superación de límite (off-by-one) en sender.c de rsync 2.6.9 podría permitir a atacantes remotos ejecutar código de su elección mediante nombres de directorio que no son manejados adecuadamente al llamar a la función f_name.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-07-30 CVE Reserved
  • 2007-08-16 CVE Published
  • 2024-07-27 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (24)
URL Tag Source
http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908 X_refsource_confirm
http://c-skills.blogspot.com/2007/08/cve-2007-4091.html X_refsource_confirm
http://secunia.com/advisories/26493 Third Party Advisory
http://secunia.com/advisories/26518 Third Party Advisory
http://secunia.com/advisories/26537 Third Party Advisory
http://secunia.com/advisories/26543 Third Party Advisory
http://secunia.com/advisories/26548 Third Party Advisory
http://secunia.com/advisories/26634 Third Party Advisory
http://secunia.com/advisories/26822 Third Party Advisory
http://secunia.com/advisories/26911 Third Party Advisory
http://secunia.com/advisories/27896 Third Party Advisory
http://secunia.com/advisories/61039 Third Party Advisory
http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html X_refsource_confirm
http://www.securityfocus.com/archive/1/477628/100/0/threaded Mailing List
http://www.securityfocus.com/bid/25336 Vdb Entry
http://www.vupen.com/english/advisories/2007/2915 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36072 Vdb Entry
https://issues.rpath.com/browse/RPL-1647 X_refsource_confirm
URL Date SRC
URL Date SRC
URL Date SRC
http://security.gentoo.org/glsa/glsa-200709-13.xml 2018-10-15
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089 2018-10-15
http://www.debian.org/security/2007/dsa-1360 2018-10-15
http://www.novell.com/linux/security/advisories/2007_17_sr.html 2018-10-15
http://www.trustix.org/errata/2007/0026 2018-10-15
http://www.ubuntu.com/usn/usn-500-1 2018-10-15
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Rsync
Search vendor "Rsync"
 Rsync
Search vendor "Rsync" for product "Rsync"
 2.6.9
Search vendor "Rsync" for product "Rsync" and version "2.6.9"
-
Affected