|
RSync Configured Module Path Escaping Vulnerability
If an rsync server is installed as a daemon with a read/write enabled module without using the 'chroot' option, it is possible that a remote attacker could write files outside of the configure module path. Rsync does not properly sanitize the paths when not running with chroot. The result is that attackers may potentially write files to the system, resulting in various consequences such as execution of arbitrary code or denial of service. |
|
 Privacy Statement |
