Summary
It was discovered that rsync incorrectly handled invalid filenames. A
malicious server could use this issue to write files outside of the
intended destination directory.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | rsync | 3.1.0-2ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization p…
References
-
report
https://ubuntu.com/security/CVE-2014-9512