CVE-2002-0048
rsync - Remote Code Execution via Signedness Error in I/O Functions
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-0048. PoCs published by sorbo, Teso.
AI-analyzed exploit summary This exploit targets a frame pointer overflow in rsync <= 2.5.1, allowing arbitrary memory writes via a negative array index. It achieves remote code execution (RCE) as root by corrupting the stack and redirecting execution to shellcode.
Description
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
Exploits (3)
This exploit targets a frame pointer overflow in rsync <= 2.5.1, allowing arbitrary memory writes via a negative array index. It achieves remote code execution (RCE) as root by corrupting the stack and redirecting execution to shellcode.
This exploit targets a buffer overflow vulnerability in rsync versions <= 2.5.1, allowing remote code execution via crafted input with negative lengths. It includes shellcode for Linux and FreeBSD to spawn a shell.
This exploit targets a buffer overflow vulnerability in rsync versions up to 2.5.1, allowing remote code execution via a crafted payload. It leverages a NULL byte off-by-one error in read_sbuf to overwrite memory and execute shellcode.