CVE-2018-5764

HIGH

rsync < 3.1.3 - Argument Sanitization Bypass via Multiple --protect-args Uses

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-5764. PoCs published by waleedadam360-web.

AI-analyzed exploit summary This repository contains a browser extension designed to detect unsafe Rsync commands by checking for the absence of the `--protect-args` flag, which mitigates CVE-2018-5764. It provides real-time scanning, alerts, and mitigation guidance for users.

Description

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Exploits (1)

nomisec SCANNER

by waleedadam360-web · poc

https://github.com/waleedadam360-web/SyncShield

View Code ZIP pw:eip

This repository contains a browser extension designed to detect unsafe Rsync commands by checking for the absence of the `--protect-args` flag, which mitigates CVE-2018-5764. It provides real-time scanning, alerts, and mitigation guidance for users.

Classification

Scanner 100%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Rsync (versions affected by CVE-2018-5764)

No auth needed

Prerequisites: User must input or paste an Rsync command into the extension

MITRE ATT&CK