Description (CNA)
rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC_CONNECT_PROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shell command newline injection. Attackers can inject shell metacharacters or newline characters into unsanitized user-supplied values such as hostnames and hostspecs to execute arbitrary commands under the privileges of the rsync process or the invoking user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| RsyncProject / rsync | affected 0 through 3.4.4; unaffected 3.5.0 |
CWE
CWE-78, CWE-88
References
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-5hcf-7xxm-rmqq
- https://github.com/RsyncProject/rsync/releases/tag/v3.5.0
- https://www.vulncheck.com/advisories/rsync-command-injection-via-multiple-code-paths
ADP enrichment
No English description supplied.
No references supplied.