CVE-2011-1097

Published: Mar 30, 2011Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.

Affected (8)

Products: Samba: Rsync

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Samba Rsync	Version 3.0.0
Samba Rsync	Version 3.0.1
Samba Rsync	Version 3.0.2
Samba Rsync	Version 3.0.3
Samba Rsync	Version 3.0.4
Samba Rsync	Version 3.0.5
Samba Rsync	Version 3.0.6
Samba Rsync	Version 3.0.7

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (38)

http://gitweb.samba.org/?p=rsync.git%3Ba=commit%3Bh=83b94efa6b60a3ff5eee4c5f7812c617a90a03f6

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057641.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057736.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057737.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Source: secalert@redhat.com

http://lists.samba.org/archive/rsync/2011-January/025988.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=133226187115472&w=2

Source: secalert@redhat.com

http://rsync.samba.org/ftp/rsync/src/rsync-3.0.8-NEWS

Source: secalert@redhat.com

http://secunia.com/advisories/44071

Source: secalert@redhat.com

http://secunia.com/advisories/44088

Source: secalert@redhat.com

http://securitytracker.com/id?1025256

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:066

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0390.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0792

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0793

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0873

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0876

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=675036

Source: secalert@redhat.com

Patch

https://bugzilla.samba.org/show_bug.cgi?id=7936

Source: secalert@redhat.com

http://gitweb.samba.org/?p=rsync.git%3Ba=commit%3Bh=83b94efa6b60a3ff5eee4c5f7812c617a90a03f6

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057641.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057736.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057737.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.samba.org/archive/rsync/2011-January/025988.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=133226187115472&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rsync.samba.org/ftp/rsync/src/rsync-3.0.8-NEWS

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44071

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44088

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1025256

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:066

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0390.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0792

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0793

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0873

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0876

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=675036

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.samba.org/show_bug.cgi?id=7936

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.