Skip to content
Noroxi

rsync records

3 published records for vendor rsync.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2007-6200
      41Plan

      Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclud

      CriticalCVSS 10.0No exploitEPSS 4%

      rsync · rsyncDec 1, 2007

    • CVE-2007-6199
      38Monitor

      rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files vi

      CriticalCVSS 9.3No exploitEPSS 4%

      rsync · rsyncDec 1, 2007

    • CVE-2007-4091
      28Monitor

      Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via directory names that ar

      MediumCVSS 6.8No exploitEPSS 3%

      rsync · rsyncAug 15, 2007