CVE-2007-4091 (GCVE-0-2007-4091)
Vulnerability from cvelistv5
Published
2007-08-16 00:00
Modified
2024-08-07 14:46
Severity ?
CWE
  • n/a
Summary
Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.
References
cve@mitre.org http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908
cve@mitre.org http://c-skills.blogspot.com/2007/08/cve-2007-4091.html
cve@mitre.org http://secunia.com/advisories/26493
cve@mitre.org http://secunia.com/advisories/26518
cve@mitre.org http://secunia.com/advisories/26537
cve@mitre.org http://secunia.com/advisories/26543
cve@mitre.org http://secunia.com/advisories/26548
cve@mitre.org http://secunia.com/advisories/26634
cve@mitre.org http://secunia.com/advisories/26822
cve@mitre.org http://secunia.com/advisories/26911
cve@mitre.org http://secunia.com/advisories/27896
cve@mitre.org http://secunia.com/advisories/61039
cve@mitre.org http://security.gentoo.org/glsa/glsa-200709-13.xml
cve@mitre.org http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089
cve@mitre.org http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html
cve@mitre.org http://www.debian.org/security/2007/dsa-1360
cve@mitre.org http://www.novell.com/linux/security/advisories/2007_17_sr.html
cve@mitre.org http://www.securityfocus.com/archive/1/477628/100/0/threaded
cve@mitre.org http://www.securityfocus.com/bid/25336
cve@mitre.org http://www.trustix.org/errata/2007/0026/
cve@mitre.org http://www.ubuntu.com/usn/usn-500-1
cve@mitre.org http://www.vupen.com/english/advisories/2007/2915
cve@mitre.org https://exchange.xforce.ibmcloud.com/vulnerabilities/36072
cve@mitre.org https://issues.rpath.com/browse/RPL-1647
af854a3a-2127-422b-91ae-364da2661108 http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908
af854a3a-2127-422b-91ae-364da2661108 http://c-skills.blogspot.com/2007/08/cve-2007-4091.html
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26493
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26518
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26537
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26543
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26548
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26634
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26822
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/26911
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/27896
af854a3a-2127-422b-91ae-364da2661108 http://secunia.com/advisories/61039
af854a3a-2127-422b-91ae-364da2661108 http://security.gentoo.org/glsa/glsa-200709-13.xml
af854a3a-2127-422b-91ae-364da2661108 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089
af854a3a-2127-422b-91ae-364da2661108 http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html
af854a3a-2127-422b-91ae-364da2661108 http://www.debian.org/security/2007/dsa-1360
af854a3a-2127-422b-91ae-364da2661108 http://www.novell.com/linux/security/advisories/2007_17_sr.html
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/archive/1/477628/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/25336
af854a3a-2127-422b-91ae-364da2661108 http://www.trustix.org/errata/2007/0026/
af854a3a-2127-422b-91ae-364da2661108 http://www.ubuntu.com/usn/usn-500-1
af854a3a-2127-422b-91ae-364da2661108 http://www.vupen.com/english/advisories/2007/2915
af854a3a-2127-422b-91ae-364da2661108 https://exchange.xforce.ibmcloud.com/vulnerabilities/36072
af854a3a-2127-422b-91ae-364da2661108 https://issues.rpath.com/browse/RPL-1647
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:46:38.629Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "27896",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27896"
          },
          {
            "name": "GLSA-200709-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200709-13.xml"
          },
          {
            "name": "26822",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26822"
          },
          {
            "name": "rsync-fname-bo(36072)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36072"
          },
          {
            "name": "USN-500-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-500-1"
          },
          {
            "name": "26493",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26493"
          },
          {
            "name": "61039",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61039"
          },
          {
            "name": "26634",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26634"
          },
          {
            "name": "SUSE-SR:2007:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_17_sr.html"
          },
          {
            "name": "26543",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26543"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1647"
          },
          {
            "name": "20070823 FLEA-2007-0047-1 rsync",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/477628/100/0/threaded"
          },
          {
            "name": "DSA-1360",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1360"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908"
          },
          {
            "name": "SSA:2007-335-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.481089"
          },
          {
            "name": "2007-0026",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0026/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://c-skills.blogspot.com/2007/08/cve-2007-4091.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html"
          },
          {
            "name": "25336",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25336"
          },
          {
            "name": "26537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26537"
          },
          {
            "name": "ADV-2007-2915",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2915"
          },
          {
            "name": "26518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26518"
          },
          {
            "name": "26548",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26548"
          },
          {
            "name": "26911",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26911"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-08-15T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "27896",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27896"
        },
        {
          "name": "GLSA-200709-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200709-13.xml"
        },
        {
          "name": "26822",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26822"
        },
        {
          "name": "rsync-fname-bo(36072)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36072"
        },
        {
          "name": "USN-500-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-500-1"
        },
        {
          "name": "26493",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26493"
        },
        {
          "name": "61039",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61039"
        },
        {
          "name": "26634",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26634"
        },
        {
          "name": "SUSE-SR:2007:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_17_sr.html"
        },
        {
          "name": "26543",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26543"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1647"
        },
        {
          "name": "20070823 FLEA-2007-0047-1 rsync",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/477628/100/0/threaded"
        },
        {
          "name": "DSA-1360",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1360"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908"
        },
        {
          "name": "SSA:2007-335-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.481089"
        },
        {
          "name": "2007-0026",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0026/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://c-skills.blogspot.com/2007/08/cve-2007-4091.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html"
        },
        {
          "name": "25336",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25336"
        },
        {
          "name": "26537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26537"
        },
        {
          "name": "ADV-2007-2915",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2915"
        },
        {
          "name": "26518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26518"
        },
        {
          "name": "26548",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26548"
        },
        {
          "name": "26911",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26911"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-4091",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "27896",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27896"
            },
            {
              "name": "GLSA-200709-13",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200709-13.xml"
            },
            {
              "name": "26822",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26822"
            },
            {
              "name": "rsync-fname-bo(36072)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36072"
            },
            {
              "name": "USN-500-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-500-1"
            },
            {
              "name": "26493",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26493"
            },
            {
              "name": "61039",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/61039"
            },
            {
              "name": "26634",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26634"
            },
            {
              "name": "SUSE-SR:2007:017",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_17_sr.html"
            },
            {
              "name": "26543",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26543"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1647",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1647"
            },
            {
              "name": "20070823 FLEA-2007-0047-1 rsync",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/477628/100/0/threaded"
            },
            {
              "name": "DSA-1360",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1360"
            },
            {
              "name": "http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908",
              "refsource": "CONFIRM",
              "url": "http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908"
            },
            {
              "name": "SSA:2007-335-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.481089"
            },
            {
              "name": "2007-0026",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0026/"
            },
            {
              "name": "http://c-skills.blogspot.com/2007/08/cve-2007-4091.html",
              "refsource": "CONFIRM",
              "url": "http://c-skills.blogspot.com/2007/08/cve-2007-4091.html"
            },
            {
              "name": "http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html",
              "refsource": "CONFIRM",
              "url": "http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html"
            },
            {
              "name": "25336",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25336"
            },
            {
              "name": "26537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26537"
            },
            {
              "name": "ADV-2007-2915",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2915"
            },
            {
              "name": "26518",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26518"
            },
            {
              "name": "26548",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26548"
            },
            {
              "name": "26911",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26911"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-4091",
    "datePublished": "2007-08-16T00:00:00",
    "dateReserved": "2007-07-30T00:00:00",
    "dateUpdated": "2024-08-07T14:46:38.629Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2007-4091\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2007-08-16T00:17:00.000\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that are not properly handled when calling the f_name function.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples errores de superaci\u00f3n de l\u00edmite (off-by-one) en sender.c de rsync 2.6.9 podr\u00eda permitir a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante nombres de directorio que no son manejados adecuadamente al llamar a la funci\u00f3n f_name.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":true,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rsync:rsync:2.6.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32A205AF-8E75-4AD8-BE0F-EC6A9296D127\"}]}]}],\"references\":[{\"url\":\"http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://c-skills.blogspot.com/2007/08/cve-2007-4091.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26493\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26518\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26537\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26543\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26548\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26634\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26822\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/26911\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/27896\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/61039\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200709-13.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.481089\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2007/dsa-1360\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_17_sr.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/477628/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/25336\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.trustix.org/errata/2007/0026/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/usn-500-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/2915\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/36072\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://issues.rpath.com/browse/RPL-1647\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://article.gmane.org/gmane.linux.debian.devel.bugs.general/291908\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://c-skills.blogspot.com/2007/08/cve-2007-4091.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26493\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26518\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26537\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26543\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26548\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26634\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26822\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/26911\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/27896\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/61039\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://security.gentoo.org/glsa/glsa-200709-13.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.481089\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15548.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2007/dsa-1360\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2007_17_sr.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/477628/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/25336\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.trustix.org/errata/2007/0026/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/usn-500-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2007/2915\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/36072\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://issues.rpath.com/browse/RPL-1647\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}],\"vendorComments\":[{\"organization\":\"Red Hat\",\"comment\":\"Not vulnerable.  This flaw did not affect Red Hat Enterprise Linux 2.1, 3, or 4 due to the version of rsync.\\n\\nThis flaw does exist in Red Hat Enterprise Linux 5, but due to the nature of the flaw it is not exploitable with any security consequence due to stack-protector.\",\"lastModified\":\"2007-08-22T00:00:00\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.