CVE-2007-4091
CVE-2007-4091
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.
EPSS 3.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/27896
- http://security.gentoo.org/glsa/glsa-200709-13.xml
- http://secunia.com/advisories/26822
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36072
- http://www.ubuntu.com/usn/usn-500-1
- http://secunia.com/advisories/26493
- http://secunia.com/advisories/61039
- http://secunia.com/advisories/26634
- http://www.novell.com/linux/security/advisories/2007_17_sr.html
- http://secunia.com/advisories/26543
- https://issues.rpath.com/browse/RPL-1647
- http://www.securityfocus.com/archive/1/477628/100/0/threaded
- http://www.debian.org/security/2007/dsa-1360
- http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089
- http://www.trustix.org/errata/2007/0026/
- http://c-skills.blogspot.com/2007/08/cve-2007-4091.html
- http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html
- http://www.securityfocus.com/bid/25336
- http://secunia.com/advisories/26537
- http://www.vupen.com/english/advisories/2007/2915
- http://secunia.com/advisories/26518
- http://secunia.com/advisories/26548
- https://nvd.nist.gov/vuln/detail/CVE-2007-4091