CVE-2014-2855 in rsync
요약 (영어)
The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
예약하다
2014. 04. 15.
공개
2014. 04. 23.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 13017 | rsync authenticate.c check_secret 권한 상승 | 20 | 입증되지 않음 | 공식 수정 | CVE-2014-2855 |