[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <5eaf834a-f27c-4f17-a184-c9b0c98aedf7@oracle.com>
Date: Mon, 18 Aug 2025 18:53:52 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: Re: RSYNC: 6 vulnerabilities
On 1/14/25 08:53, Nick Tait wrote:
> Hello OSS-security,
>
> Two independent groups of researchers have identified a total of 6
> vulnerabilities in rsync. In the most severe CVE, an attacker only requires
> anonymous read access to a rsync server, such as a public mirror, to
> execute arbitrary code on the machine the server is running on.
The researchers responsible for #1-#5 on that list have now published their
writeup in https://phrack.org/issues/72/11_md#article .
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
