Get the latest tech news

Rsync vulnerabilities

Message-ID: <CALDM2HfAOzs+zr3XLCDAKH8oOosigdaNooUANDf=Ez5mLSvQcQ@mail.gmail.com> Date: Tue, 14 Jan 2025 09:53:56 -0700 From: Nick Tait <ntait@...hat.com> To: oss-security@...ts.openwall.com Subject: RSYNC: 6 vulnerabilities Hello OSS-security, Two independent groups of researchers have identified a total of 6 vulnerabilities in rsync. In the most severe CVE, an attacker only requires anonymous read access to a rsync server, such as a public mirror, to execute arbitrary code on the machine the server is running on.

[<prev][next>][thread-next>][day][month][year][list]

Get the Android app