Slackware 8.1 / 9.0 / 9.1 / current : rsync security update (SSA:2003-337-01)

high Nessus Plugin ID 18734

Synopsis

The remote Slackware host is missing a security update.

Description

Rsync is a file transfer client and server. A security problem which may lead to unauthorized machine access or code execution has been fixed by upgrading to rsync-2.5.7. This problem only affects machines running rsync in daemon mode, and is easier to exploit if the non-default option 'use chroot = no' is used in the /etc/rsyncd.conf config file. Any sites running an rsync server should upgrade immediately.

Solution

Update the affected rsync package.

Plugin Details

Severity: High

ID: 18734

File Name: Slackware_SSA_2003-337-01.nasl

Version: 1.15

Type: local

Family: Slackware Local Security Checks

Published: 7/13/2005

Updated: 1/14/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:slackware:slackware_linux:rsync, cpe:/o:slackware:slackware_linux, cpe:/o:slackware:slackware_linux:8.1, cpe:/o:slackware:slackware_linux:9.0, cpe:/o:slackware:slackware_linux:9.1

Required KB Items: Host/local_checks_enabled, Host/Slackware/release, Host/Slackware/packages

Patch Publication Date: 12/4/2003

Reference Information

SSA: 2003-337-01

Detections

Analytics