CVE-2007-6200: rsync

Vulnerability summary

CVE-2007-6200 is a high (CVSS 10.0) vulnerability in rsync. EPSS estimates a 4.90% chance of exploitation in the next 30 days, higher than 91.9% of scored vulnerabilities.

Timeline

1. 01-12-2007
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.