CVE-2002-0048
HIGH 10.0EPSS 34.0%
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 34.02% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2002-02-18
- Updated
- 2024-08-08
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/21242
- https://www.exploit-db.com/exploits/399
- https://www.exploit-db.com/exploits/398
Security advisories
- http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html
- http://www.securityfocus.com/bid/3958
- http://www.debian.org/security/2002/dsa-106
- http://www.kb.cert.org/vuls/id/800635
- http://www.redhat.com/support/errata/RHSA-2002-018.html