CVE-2004-2093
rsync < 2.5.7 - Buffer Overflow via RSYNC_PROXY Environment Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2093. PoCs published by Abhisek Datta.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in rsync <= 2.5.7 by overwriting the saved EIP with a dynamically calculated return address pointing to shellcode. The shellcode binds a shell to port 10000, demonstrating a local exploit that could be adapted for remote attacks.
Description
Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long RSYNC_PROXY environment variable. NOTE: since rsync is not setuid, this issue does not provide any additional privileges beyond those that are already available to the user. Therefore this issue may be REJECTED in the future.
Exploits (1)
This exploit targets a stack-based buffer overflow in rsync <= 2.5.7 by overwriting the saved EIP with a dynamically calculated return address pointing to shellcode. The shellcode binds a shell to port 10000, demonstrating a local exploit that could be adapted for remote attacks.