CVE-2004-2093

rsync 2.5.7 - Local Stack Overflow / Local Privilege Escalation

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2004-2093 has a selected CVSS score of 4.6; EIP currently links 1 catalogued exploit.

Description

Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long RSYNC_PROXY environment variable. NOTE: since rsync is not setuid, this issue does not provide any additional privileges beyond those that are already available to the user. Therefore this issue may be REJECTED in the future.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBrsync 2.5.7 - Local Stack Overflow / Local Privilege EscalationExploitDB exploitby Abhisek DattaNot analyzed1 file
ExploitDB
PoC details

References

3