rsync memory corruption updated since 06.04.2011
Published:		27.04.2011
Source:		BUGTRAQ
SecurityVulns ID:		11565
Type:		client
Level:		5/10
Description:		Memory corruption on server reply parsing.

Affected:		RSYNC : rsync 3.0
CVE:		CVE-2011-1097 (rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.)

Original document

MANDRIVA, [ MDVSA-2011:066 ] rsync (06.04.2011)

Discuss:

Read or add your comments to this news (0 comments)