CVE Feed

    Dashboard / CVE / CVE-2007-4091

    CVE-2007-4091

    Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.

    Published:Aug 15, 2007
    Last Modified:Apr 23, 2026
    EPS:Aug 16, 2007
    EPSS Score:0.08602
    CVSS Score:6.8

    Affected Products

    Vendor
    Rsync
    Product
    Rsync

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-193 Off-by-one Error

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908
    http://c-skills.blogspot.com/2007/08/cve-2007-4091.html
    http://secunia.com/advisories/26493
    http://secunia.com/advisories/26518
    http://secunia.com/advisories/26537
    http://secunia.com/advisories/26543
    http://secunia.com/advisories/26548
    http://secunia.com/advisories/26634
    http://secunia.com/advisories/26822
    http://secunia.com/advisories/26911
    http://secunia.com/advisories/27896
    http://secunia.com/advisories/61039
    http://security.gentoo.org/glsa/glsa-200709-13.xml
    http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089
    http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html
    http://www.debian.org/security/2007/dsa-1360
    http://www.novell.com/linux/security/advisories/2007_17_sr.html
    http://www.securityfocus.com/archive/1/477628/100/0/threaded
    http://www.securityfocus.com/bid/25336
    http://www.trustix.org/errata/2007/0026/
    http://www.ubuntu.com/usn/usn-500-1
    http://www.vupen.com/english/advisories/2007/2915
    https://exchange.xforce.ibmcloud.com/vulnerabilities/36072
    https://issues.rpath.com/browse/RPL-1647
    http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908
    http://c-skills.blogspot.com/2007/08/cve-2007-4091.html
    http://secunia.com/advisories/26493
    http://secunia.com/advisories/26518
    http://secunia.com/advisories/26537
    http://secunia.com/advisories/26543
    http://secunia.com/advisories/26548
    http://secunia.com/advisories/26634
    http://secunia.com/advisories/26822
    http://secunia.com/advisories/26911
    http://secunia.com/advisories/27896
    http://secunia.com/advisories/61039
    http://security.gentoo.org/glsa/glsa-200709-13.xml
    http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089
    http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html
    http://www.debian.org/security/2007/dsa-1360
    http://www.novell.com/linux/security/advisories/2007_17_sr.html
    http://www.securityfocus.com/archive/1/477628/100/0/threaded
    http://www.securityfocus.com/bid/25336
    http://www.trustix.org/errata/2007/0026/
    http://www.ubuntu.com/usn/usn-500-1
    http://www.vupen.com/english/advisories/2007/2915
    https://exchange.xforce.ibmcloud.com/vulnerabilities/36072
    https://issues.rpath.com/browse/RPL-1647

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High