CVE-2011-1097
rsync: Incremental file-list corruption due to temporary file_extra_cnt increments
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
rsync 3.x anterior a3.0.8, cuando se utilizan ciertas opciones de recursión, borrado, y propietario, permite a los servidores rsync remotos provocar una denegación de servicio (corrupción de memoria dinámica y caída de la aplicación) o posiblemente ejecutar código arbitrario a través de datos con formato incorrecto.
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2012. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-02-24 CVE Reserved
- 2011-03-30 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (20)
| URL | Tag | Source |
|---|---|---|
| http://gitweb.samba.org/?p=rsync.git%3Ba=commit%3Bh=83b94efa6b60a3ff5eee4c5f7812c617a90a03f6 | X_refsource_confirm | |
| http://lists.samba.org/archive/rsync/2011-January/025988.html | Mailing List | |
| http://rsync.samba.org/ftp/rsync/src/rsync-3.0.8-NEWS | X_refsource_confirm | |
| http://secunia.com/advisories/44071 | Third Party Advisory | |
| http://secunia.com/advisories/44088 | Third Party Advisory | |
| http://securitytracker.com/id?1025256 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/0873 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2011/0876 | Vdb Entry | |
| https://bugzilla.samba.org/show_bug.cgi?id=7936 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=675036 | 2011-03-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.0 Search vendor "Samba" for product "Rsync" and version "3.0.0" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.1 Search vendor "Samba" for product "Rsync" and version "3.0.1" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.2 Search vendor "Samba" for product "Rsync" and version "3.0.2" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.3 Search vendor "Samba" for product "Rsync" and version "3.0.3" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.4 Search vendor "Samba" for product "Rsync" and version "3.0.4" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.5 Search vendor "Samba" for product "Rsync" and version "3.0.5" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.6 Search vendor "Samba" for product "Rsync" and version "3.0.6" | - |
Affected
| ||||||
| Samba Search vendor "Samba" | Rsync Search vendor "Samba" for product "Rsync" | 3.0.7 Search vendor "Samba" for product "Rsync" and version "3.0.7" | - |
Affected
| ||||||