Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
rsync服务远程堆破坏漏洞
Vulnerability Description
rsync是一款用于服务器同步的程序。 rsync服务存在堆破坏问题,远程攻击者可以利用这个漏洞以rsync进程权限在系统上执行任意指令。 rsync存在一个未明的堆溢出问题可用于远程执行任意代码,利用这个漏洞不能直接获得管理员权限,不过结合最近的do_brk()函数存在的漏洞可以用于获得root用户权限。如果服务器使用非默认rsyncd.conf配置选项"use chroot = no",可导致使攻击者更容易进行攻击。 Rsync服务默认监听873端口。
CVSS Information
N/A
Vulnerability Type
N/A