CVE-2002-0048

Description

Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 69.46% Top 5%

Vendor Advisory linuxsecurity.com Vendor Advisory com.br Vendor Advisory debian.org Vendor Advisory suse.com Vendor Advisory caldera.com Vendor Advisory redhat.com Vendor Advisory freebsd.org Vendor Advisory securityfocus.com Vendor Advisory linux-mandrake.com Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://www.securityfocus.com/bid/3958	vdb entry patch vendor advisory
http://marc.info/?l=bugtraq&m=101223214906963&w=2	mailing list
http://www.linuxsecurity.com/advisories/other_advisory-1853.html	vendor advisory
http://marc.info/?l=bugtraq&m=101223603321315&w=2	mailing list
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458	vendor advisory
http://www.kb.cert.org/vuls/id/800635	third party advisory us government resource
http://www.debian.org/security/2002/dsa-106	patch vendor advisory
http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html	patch vendor advisory
http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt	vendor advisory
http://www.iss.net/security_center/static/7993.php	vdb entry
http://www.redhat.com/support/errata/RHSA-2002-018.html	vendor advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc	vendor advisory
http://online.securityfocus.com/advisories/3839	vendor advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2002-0048?: CVE-2002-0048 has been scored as a critical severity vulnerability.
How to fix CVE-2002-0048?: To fix CVE-2002-0048, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2002-0048 being actively exploited in the wild?: It is possible that CVE-2002-0048 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~69% probability that this vulnerability will be exploited by malicious actors in the next 30 days.