CVE-2002-0048
andrew tridgell rsync: no CVSS score yet. EPSS 34% chance of exploitation in the next 30 days.
Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
- EPSS
- 34% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- andrew_tridgell:rsync
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458
- http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html
- http://marc.info/?l=bugtraq&m=101223214906963&w=2
- http://marc.info/?l=bugtraq&m=101223603321315&w=2