リモートのrsyncサーバーは、パストラバーサルの問題に対して脆弱である可能性があります。

攻撃者が、この欠陥を利用して、モジュールディレクトリの外部でホストされている任意のファイルへのアクセス権を取得する可能性があります。

遠端 rsync 伺服器可能容易受到路徑遊走問題影響。

攻擊者可利用此缺陷，取得模組目錄外主控的任意檔案存取權。

The remote host is affected by the vulnerability described in GLSA-200407-10 (rsync: Directory traversal in rsync daemon)

    When rsyncd is used without chroot ('use chroot = false' in the rsyncd.conf     file), the paths sent by the client are not checked thoroughly enough. If     rsyncd is used with read-write permissions ('read only = false'), this     vulnerability can be used to write files anywhere with the rights of the     rsyncd daemon. With default Gentoo installations, rsyncd runs in a chroot,     without write permissions and with the rights of the 'nobody' user.
  Impact :

    On affected configurations and if the rsync daemon runs under a privileged     user, a remote client can exploit this vulnerability to completely     compromise the host.
  Workaround :

    You should never set the rsync daemon to run with 'use chroot = false'. If     for some reason you have to run rsyncd without a chroot, then you should     not set 'read only = false'.

When running rsync in daemon mode, no checks were made to prevent clients from writing outside of a module's `path' setting.

远程 rsync 服务器可能容易受到路径遍历问题的影响。

攻击者可利用此缺陷获取对托管在模块目录外任意文件的访问权限。

The remote rsync server might be vulnerable to a path traversal issue.

An attacker may use this flaw to gain access to arbitrary files hosted outside of a module directory.

The remote host is missing Security Update 2004-09-07.  This security update fixes the following components :

  - CoreFoundation
  - IPSec
  - Kerberos
  - libpcap
  - lukemftpd
  - NetworkConfig
  - OpenLDAP
  - OpenSSH
  - PPPDialer
  - rsync
  - Safari
  - tcpdump

These applications contain multiple vulnerabilities that may allow a remote attacker to execute arbitrary code.

Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to write files outside of the module's 'path', depending on the privileges assigned to the rsync daemon. Users not running an rsync daemon, running a read-only daemon, or running a chrooted daemon are not affected by this issue. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0426 to this issue.

Updated packages were made available in June 2004 however the original update notification email did not make it to fedora-announce-list at that time.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New rsync packages are available for Slackware 8.1, 9.0, 9.1, and
-current to fix a security issue. When running an rsync server without the chroot option it is possible for an attacker to write outside of the allowed directory. Any sites running rsync in that mode should upgrade right away (and should probably look into using the chroot option as well).

A vulnerability was discovered in rsync, a file transfer program, whereby a remote user could cause an rsync daemon to write files outside of the intended directory tree. This vulnerability is not exploitable when the daemon is configured with the 'chroot' option.

An updated rsync package that fixes a directory traversal security flaw is now available.

Rsync is a program for synchronizing files over a network.

Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot. This could allow a remote attacker to write files outside of the module's 'path', depending on the privileges assigned to the rsync daemon. Users not running an rsync daemon, running a read-only daemon, or running a chrooted daemon are not affected by this issue. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0426 to this issue.

Users of Rsync are advised to upgrade to this updated package, which contains a backported patch and is not affected by this issue.

Rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, allows remote attackers to write files outside of the module's path.

The updated packages provide a patched rsync to correct this problem.

The remote rsync server may be vulnerable to a path traversal issue.
 An attacker may use this flaw to create arbitrary files hosted outside of a module directory.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
12230	rsyncトラバーサルの任意ファイル作成	Nessus	Misc.	2004/5/6	2018/7/27	medium
12230	rsync 遊走任意檔案建立	Nessus	Misc.	2004/5/6	2018/7/27	medium
14543	GLSA-200407-10 : rsync: Directory traversal in rsync daemon	Nessus	Gentoo Local Security Checks	2004/8/30	2021/1/6	medium
38112	FreeBSD : rsync path traversal issue (73ea0706-9c57-11d8-9366-0020ed76ef5a)	Nessus	FreeBSD Local Security Checks	2009/4/23	2021/1/6	medium
12230	rsync 遍历任意文件创建	Nessus	Misc.	2004/5/6	2018/7/27	medium
12230	rsync Traversal Arbitrary File Creation	Nessus	Misc.	2004/5/6	2018/7/27	medium
14676	Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07)	Nessus	MacOS X Local Security Checks	2004/9/8	2024/5/28	high
13695	Fedora Core 1 : rsync-2.5.7-5.fc1 (2004-116)	Nessus	Fedora Local Security Checks	2004/7/23	2021/1/11	medium
18768	Slackware 8.1 / 9.0 / 9.1 / current : rsync update (SSA:2004-124-01)	Nessus	Slackware Local Security Checks	2005/7/13	2021/1/14	medium
15336	Debian DSA-499-2 : rsync - directory traversal	Nessus	Debian Local Security Checks	2004/9/29	2021/1/4	medium
12497	RHEL 2.1 / 3 : rsync (RHSA-2004:192)	Nessus	Red Hat Local Security Checks	2004/7/6	2021/1/14	medium
14141	Mandrake Linux Security Advisory : rsync (MDKSA-2004:042)	Nessus	Mandriva Local Security Checks	2004/7/31	2021/1/6	medium
1216	rsync < 2.6.1 Traversal Arbitrary File Creation	Nessus Network Monitor	Generic	2004/8/20	2019/3/6	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium