The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
rsync Integer Overflow
------------------------------------------------------------------------
SUMMARY
" <http://rsync.samba.org/> rsync is an open source utility that provides
fast incremental file transfer."
An attacker having write access to an rsync module is able execute
arbitrary code on an rsync server.
DETAILS
Vulnerable Systems:
* rsync version 2.6.7 and prior
Immune Systems:
* rsync version 2.6.8 and above
An integer overflow was found in the receive_xattr function from the
extended attributes patch (xattr.c) for rsync. The vulnerable function is
only present when the "acl" USE flag is set.
A remote attacker with write access to an rsync module could craft
malicious extended attributes which would trigger the integer overflow,
potentially resulting in the execution of arbitrary code with the rights
of the rsync daemon.
Workaround:
Do not provide write access to an rsync module to untrusted parties.
CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2083>
CVE-2006-2083
ADDITIONAL INFORMATION
The information has been provided by <mailto:jaervosz@gentoo.org> Sune
Kloppenborg Jeppesen.
The original article can be found at:
<http://security.gentoo.org/glsa/glsa-200605-05.xml>
http://security.gentoo.org/glsa/glsa-200605-05.xml
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
