CVE-2003-0962

Description

Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 39.98% Top 5%

Vendor Advisory marc.info Vendor Advisory com.br Vendor Advisory sgi.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://marc.info/?l=bugtraq&m=107055681311602&w=2	mailing list
http://marc.info/?l=bugtraq&m=107055684711629&w=2	vendor advisory
http://secunia.com/advisories/10362	third party advisory
http://secunia.com/advisories/10364	third party advisory
http://secunia.com/advisories/10354	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/13899	vdb entry
http://secunia.com/advisories/10363	third party advisory
http://secunia.com/advisories/10353	third party advisory
http://secunia.com/advisories/10357	third party advisory
http://secunia.com/advisories/10355	third party advisory
http://www.kb.cert.org/vuls/id/325603	third party advisory us government resource
http://secunia.com/advisories/10358	third party advisory
http://marc.info/?l=bugtraq&m=107056923528423&w=2	mailing list
http://secunia.com/advisories/10360	third party advisory
http://secunia.com/advisories/10361	third party advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000794	vendor advisory
http://marc.info/?l=bugtraq&m=107055702911867&w=2	mailing list
http://secunia.com/advisories/10474	third party advisory
ftp://patches.sgi.com/support/free/security/advisories/20031202-01-U	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9415	vdb entry signature
http://www.redhat.com/support/errata/RHSA-2003-398.html	patch vendor advisory
http://secunia.com/advisories/10356	third party advisory
http://www.osvdb.org/2898	vdb entry
http://www.mandriva.com/security/advisories?name=MDKSA-2003:111	vendor advisory
http://www.securityfocus.com/bid/9153	vdb entry patch vendor advisory
http://secunia.com/advisories/10359	third party advisory
http://secunia.com/advisories/10378	third party advisory

Frequently Asked Questions

What is the severity of CVE-2003-0962?: CVE-2003-0962 has been scored as a high severity vulnerability.
How to fix CVE-2003-0962?: To fix CVE-2003-0962, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0962 being actively exploited in the wild?: It is possible that CVE-2003-0962 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~40% probability that this vulnerability will be exploited by malicious actors in the next 30 days.