CVE-2003-0962

high · 7.5

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

7.5

CVSS

21.2%

EPSS (exploit prob.)

97th

EPSS percentile

2003-12-15

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
andrew_tridgell	rsync	2.3.1
andrew_tridgell	rsync	2.3.2
andrew_tridgell	rsync	2.4.0
andrew_tridgell	rsync	2.4.1
andrew_tridgell	rsync	2.4.3
andrew_tridgell	rsync	2.4.4
andrew_tridgell	rsync	2.4.5
andrew_tridgell	rsync	2.4.6
andrew_tridgell	rsync	2.4.8
andrew_tridgell	rsync	2.5.0
andrew_tridgell	rsync	2.5.1
andrew_tridgell	rsync	2.5.2
andrew_tridgell	rsync	2.5.3
andrew_tridgell	rsync	2.5.4
andrew_tridgell	rsync	2.5.5
andrew_tridgell	rsync	2.5.6
redhat	rsync	2.4.6-2
redhat	rsync	2.4.6-5
redhat	rsync	2.4.6-5
redhat	rsync	2.5.4-2
redhat	rsync	2.5.5-1
redhat	rsync	2.5.5-4
engardelinux	secure_community	1.0.1
engardelinux	secure_community	2.0
engardelinux	secure_linux	1.1
engardelinux	secure_linux	1.2
engardelinux	secure_linux	1.5
slackware	slackware_linux	8.1
slackware	slackware_linux	9.0
slackware	slackware_linux	9.1
slackware	slackware_linux	current

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0962