CVE-2011-1097
rsync: Incremental file-list corruption due to temporary file_extra_cnt increments
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
rsync 3.x anterior a3.0.8, cuando se utilizan ciertas opciones de recursión, borrado, y propietario, permite a los servidores rsync remotos provocar una denegación de servicio (corrupción de memoria dinámica y caída de la aplicación) o posiblemente ejecutar código arbitrario a través de datos con formato incorrecto.
It was discovered that rsync incorrectly handled memory when certain recursion, deletion and ownership options were used. If a user were tricked into connecting to a malicious server, a remote attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-02-24 CVE Reserved
- 2011-03-30 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (20)
| URL | Tag | Source |
|---|---|---|
| http://gitweb.samba.org/?p=rsync.git%3Ba=commit%3Bh=83b94efa6b60a3ff5eee4c5f7812c617a90a03f6 | X_refsource_confirm | |
| http://lists.samba.org/archive/rsync/2011-January/025988.html | Mailing List | |
| http://rsync.samba.org/ftp/rsync/src/rsync-3.0.8-NEWS | X_refsource_confirm | |
| http://secunia.com/advisories/44071 | Third Party Advisory | |
| http://secunia.com/advisories/44088 | Third Party Advisory | |
| http://securitytracker.com/id?1025256 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/0873 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/0876 | Vdb Entry | |
| https://bugzilla.samba.org/show_bug.cgi?id=7936 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=675036 | 2011-03-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.0 Search vendor "Samba" for product "Rsync" and version "3.0.0" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.1 Search vendor "Samba" for product "Rsync" and version "3.0.1" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.2 Search vendor "Samba" for product "Rsync" and version "3.0.2" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.3 Search vendor "Samba" for product "Rsync" and version "3.0.3" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.4 Search vendor "Samba" for product "Rsync" and version "3.0.4" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.5 Search vendor "Samba" for product "Rsync" and version "3.0.5" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.6 Search vendor "Samba" for product "Rsync" and version "3.0.6" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.7 Search vendor "Samba" for product "Rsync" and version "3.0.7" | - |
Affected
| ||||||