CVE-2002-0080

UNKNOWN

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed

Published Jun 25, 2002

Modified 1 years ago

Details

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.

References

ADVISORYhttp://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt WEBhttp://www.iss.net/security_center/static/8463.php ADVISORYhttp://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2002-026.html WEBhttp://www.securityfocus.com/bid/4285 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2002-0080

CVSS Analysis

CVSS v2.0

2.1

Exploitability

Access Vector

LocalAV:L

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedJun 25, 2002

ModifiedAug 8, 2024