CVE-2004-0426 - CVE House
Back to Database
Status published Medium CVE-2004-0426

rsync before 2.6.1 does not properly sanitize paths when running...

Vulnerability Description

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0426

Credits & Attribution

No credits recorded in the NVD database.

References

More from andrew tridgell

View All →
CVE-2006-2083
Integer overflow in the receive_xattr function in the extended attributes...
High 7.5
CVE-2004-0792
Directory traversal vulnerability in the sanitize_path function in util.c for...
Medium 6.4
CVE-2003-0962
Heap-based buffer overflow in rsync before 2.5.7, when running in...
High 7.5
CVE-2002-0048
Multiple signedness errors (mixed signed and unsigned numbers) in the...
Critical 10
CVE-1999-0473
The rsync command before rsync 2.3.1 may inadvertently change the...
Low 2.1

Affected Vendor

andrew tridgell

View all reports →

Affected Software

rsync
Vulnerable Versions:
0

Timeline

Official Publish: April 30th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.