CVE-2003-0962

Dashboard / Vulnerabilities / CVE-2003-0962

CVE-2003-0962

Published: 15 Dec 2003Last Modified: 10 Apr 2026

Summary:

Details: Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

References: ftp://patches.sgi.com/support/free/security/advisories/20031202-01-U, http://secunia.com/advisories/10353, http://secunia.com/advisories/10354, http://secunia.com/advisories/10355, http://secunia.com/advisories/10356, http://secunia.com/advisories/10357, http://secunia.com/advisories/10358, http://secunia.com/advisories/10359, http://secunia.com/advisories/10360, http://secunia.com/advisories/10361, http://secunia.com/advisories/10362, http://secunia.com/advisories/10363, http://secunia.com/advisories/10364, http://secunia.com/advisories/10378, http://secunia.com/advisories/10474, http://www.mandriva.com/security/advisories?name=MDKSA-2003:111, http://www.redhat.com/support/errata/RHSA-2003-398.html, http://www.securityfocus.com/bid/9153, http://www.redhat.com/support/errata/RHSA-2003-398.html, http://www.securityfocus.com/bid/9153, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794, http://marc.info/?l=bugtraq&m=107055681311602&w=2, http://marc.info/?l=bugtraq&m=107055684711629&w=2, http://marc.info/?l=bugtraq&m=107055702911867&w=2, http://marc.info/?l=bugtraq&m=107056923528423&w=2, http://www.kb.cert.org/vuls/id/325603, http://www.osvdb.org/2898, https://exchange.xforce.ibmcloud.com/vulnerabilities/13899, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9415

Affected packages

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High