CVE-2003-0962 - CVE House
Back to Database
Status published High CVE-2003-0962

Heap-based buffer overflow in rsync before 2.5.7, when running in...

Vulnerability Description

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0962

Credits & Attribution

No credits recorded in the NVD database.

References

More from andrew tridgell

View All →
CVE-2006-2083
Integer overflow in the receive_xattr function in the extended attributes...
High 7.5
CVE-2004-0792
Directory traversal vulnerability in the sanitize_path function in util.c for...
Medium 6.4
CVE-2004-0426
rsync before 2.6.1 does not properly sanitize paths when running...
Medium 5
CVE-2002-0048
Multiple signedness errors (mixed signed and unsigned numbers) in the...
Critical 10
CVE-1999-0473
The rsync command before rsync 2.3.1 may inadvertently change the...
Low 2.1

Affected Vendor

andrew tridgell

View all reports →

Affected Software

rsync, secure community, secure linux, slackware linux
Vulnerable Versions:
2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.8, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.4.6-2, 2.4.6-5, 2.5.4-2, 2.5.5-1, 2.5.5-4, 1.0.1, 2.0, 1.1, 1.2, 1.5, 8.1, 9.0, 9.1, current

Timeline

Official Publish: December 10th, 2003
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.