Slackware 8.1 / 9.0 / 9.1 / current : rsync security update (SSA:2003-337-01)

High Nessus Plugin ID 18734


The remote Slackware host is missing a security update.


Rsync is a file transfer client and server. A security problem which may lead to unauthorized machine access or code execution has been fixed by upgrading to rsync-2.5.7. This problem only affects machines running rsync in daemon mode, and is easier to exploit if the non-default option 'use chroot = no' is used in the /etc/rsyncd.conf config file. Any sites running an rsync server should upgrade immediately.


Update the affected rsync package.

See Also

Plugin Details

Severity: High

ID: 18734

File Name: Slackware_SSA_2003-337-01.nasl

Version: $Revision: 1.11 $

Type: local

Published: 2005/07/13

Modified: 2013/06/01

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

CPE: p-cpe:/a:slackware:slackware_linux:rsync, cpe:/o:slackware:slackware_linux, cpe:/o:slackware:slackware_linux:8.1, cpe:/o:slackware:slackware_linux:9.0, cpe:/o:slackware:slackware_linux:9.1

Required KB Items: Host/local_checks_enabled, Host/Slackware/release, Host/Slackware/packages

Patch Publication Date: 2003/12/04

Reference Information

SSA: 2003-337-01