CVE-2004-0792 - CVE House
Back to Database
Status published Medium CVE-2004-0792

Directory traversal vulnerability in the sanitize_path function in util.c for...

Vulnerability Description

Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0792

Credits & Attribution

No credits recorded in the NVD database.

References

More from andrew tridgell

View All →
CVE-2006-2083
Integer overflow in the receive_xattr function in the extended attributes...
High 7.5
CVE-2004-0426
rsync before 2.6.1 does not properly sanitize paths when running...
Medium 5
CVE-2003-0962
Heap-based buffer overflow in rsync before 2.5.7, when running in...
High 7.5
CVE-2002-0048
Multiple signedness errors (mixed signed and unsigned numbers) in the...
Critical 10
CVE-1999-0473
The rsync command before rsync 2.3.1 may inadvertently change the...
Low 2.1

Affected Vendor

andrew tridgell

View all reports →

Affected Software

rsync
Vulnerable Versions:
2.3.1, 2.3.2, 2.3.2_1.2, 2.3.2_1.3, 2.4.0, 2.4.1, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.8, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.6, 2.6.1, 2.6.2

Timeline

Official Publish: August 18th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.