rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.

This update fixes a bug in rsync that allowed remote attackers to access restricted files outside a module's hierarchy if no chroot setup was used. (CVE-2007-6199) Please read http://rsync.samba.org/security.html entry from November 28th, 2007 to get more information about a secure configuration of rsync that also covers the bug tracked with CVE-2007-6200.

This update also fixes some crashes that only affect rsync-2.6.8 on SLES10.

This is a reissue of another post-SP4 rsync update.

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy. (CVE-2007-6199)

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options. (CVE-2007-6200)

This update fixes these issues. It is recommended users (specially system and network administrators) read the manpage about the introduced munge symlinks feature.

This update also upgrades rsync to version 2.6.9 for all Mandriva Linux versions earlier than 2008.0.

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-005 applied. 

This update contains security fixes for a number of programs.

This update fixes a bug in rsync that allowed remote attackers to access restricted files outside a module's hierarchy if no chroot setup was used. (CVE-2007-6199) Please read http://rsync.samba.org/security.html entry from November 28th, 2007 to get more information about a secure configuration of rsync that also covers the bug tracked with CVE-2007-6200. This update also fixes some crashes that only affect rsync-2.6.8 on SLES10.

ID	Name	Product	Family	Type	Severity
83004	F5 Networks BIG-IP : Rsync vulnerability (SOL15549)	Nessus	F5 Networks Local Security Checks	Local	high
41181	SuSE9 Security Update : rsync (YOU Patch Number 12038)	Nessus	SuSE Local Security Checks	Local	critical
36432	Mandriva Linux Security Advisory : rsync (MDVSA-2008:011)	Nessus	Mandriva Local Security Checks	Local	critical
33790	Mac OS X Multiple Vulnerabilities (Security Update 2008-005)	Nessus	MacOS X Local Security Checks	Local	critical
29790	SuSE 10 Security Update : rsync (ZYPP Patch Number 4798)	Nessus	SuSE Local Security Checks	Local	critical
29789	openSUSE 10 Security Update : rsync (rsync-4793)	Nessus	SuSE Local Security Checks	Local	critical

Detections

Analytics

CVE-2007-6199

high

Tenable Plugins

high

critical

critical

critical

critical

critical