Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-6199

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.

Published

2007-12-01T06:46:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-16
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System slackware slackware_linux 8.1 No
Operating System slackware slackware_linux 9.0 No
Operating System slackware slackware_linux 9.1 No
Operating System slackware slackware_linux 10.0 No
Operating System slackware slackware_linux 10.1 No
Operating System slackware slackware_linux 10.2 No
Operating System slackware slackware_linux 11.0 No
Operating System slackware slackware_linux 12.0 No
Application rsync rsync 2.3.1 Yes
Application rsync rsync 2.3.2 Yes
Application rsync rsync 2.3.2_1.2alpha Yes
Application rsync rsync 2.3.2_1.2arm Yes
Application rsync rsync 2.3.2_1.2intel Yes
Application rsync rsync 2.3.2_1.2m68k Yes
Application rsync rsync 2.3.2_1.2ppc Yes
Application rsync rsync 2.3.2_1.2sparc Yes
Application rsync rsync 2.3.2_1.3 Yes
Application rsync rsync 2.4.0 Yes
Application rsync rsync 2.4.1 Yes
Application rsync rsync 2.4.3 Yes
Application rsync rsync 2.4.4 Yes
Application rsync rsync 2.4.5 Yes
Application rsync rsync 2.4.6 Yes
Application rsync rsync 2.4.8 Yes
Application rsync rsync 2.5.0 Yes
Application rsync rsync 2.5.1 Yes
Application rsync rsync 2.5.2 Yes
Application rsync rsync 2.5.3 Yes
Application rsync rsync 2.5.4 Yes
Application rsync rsync 2.5.5 Yes
Application rsync rsync 2.5.6 Yes
Application rsync rsync 2.5.7 Yes
Application rsync rsync 2.6 Yes
Application rsync rsync 2.6.1 Yes
Application rsync rsync 2.6.2 Yes
Application rsync rsync 2.6.5 Yes
Application rsync rsync 2.6.6 Yes
Application rsync rsync 2.6.7 Yes
Application rsync rsync 2.6.8 Yes
Application rsync rsync 2.6.9 Yes
References