What’s Vulnerable › Vulnerabilities

CVE-2004-0426

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-07-07 · updated 2026-06-16

Description

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.

Affected products

• Andrew Tridgell Rsync: through 2.6

References

• http://marc.info/?l=bugtraq&m=108515912212018&w=2
• http://rsync.samba.org/
• http://secunia.com/advisories/11514
• http://secunia.com/advisories/11515
• http://secunia.com/advisories/11523
• http://secunia.com/advisories/11537
• http://secunia.com/advisories/11583
• http://secunia.com/advisories/11669
• http://secunia.com/advisories/11688
• http://secunia.com/advisories/11993
• http://secunia.com/advisories/12054
• http://www.ciac.org/ciac/bulletins/o-134.shtml

Get alerted when CVE-2004-0426 or the next vulnerability affects your stack