Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

  • Published: Dec 1, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-6200
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
rsync / rsync 2.3.1 2.3.1.x
rsync / rsync 2.3.2 2.3.2.x
rsync / rsync 2.3.2_1.2alpha 2.3.2_1.2alpha.x
rsync / rsync 2.3.2_1.2arm 2.3.2_1.2arm.x
rsync / rsync 2.3.2_1.2intel 2.3.2_1.2intel.x
rsync / rsync 2.3.2_1.2m68k 2.3.2_1.2m68k.x
rsync / rsync 2.3.2_1.2ppc 2.3.2_1.2ppc.x
rsync / rsync 2.3.2_1.2sparc 2.3.2_1.2sparc.x
rsync / rsync 2.3.2_1.3 2.3.2_1.3.x
rsync / rsync 2.4.0 2.4.0.x
rsync / rsync 2.4.1 2.4.1.x
rsync / rsync 2.4.3 2.4.3.x
rsync / rsync 2.4.4 2.4.4.x
rsync / rsync 2.4.5 2.4.5.x
rsync / rsync 2.4.6 2.4.6.x
rsync / rsync 2.4.8 2.4.8.x
rsync / rsync 2.5.0 2.5.0.x
rsync / rsync 2.5.1 2.5.1.x
rsync / rsync 2.5.2 2.5.2.x
rsync / rsync 2.5.3 2.5.3.x
rsync / rsync 2.5.4 2.5.4.x
rsync / rsync 2.5.5 2.5.5.x
rsync / rsync 2.5.6 2.5.6.x
rsync / rsync 2.5.7 2.5.7.x
rsync / rsync 2.6 2.6.x
rsync / rsync 2.6.1 2.6.1.x
rsync / rsync 2.6.2 2.6.2.x
rsync / rsync 2.6.5 2.6.5.x
rsync / rsync 2.6.6 2.6.6.x
rsync / rsync 2.6.7 2.6.7.x
rsync / rsync 2.6.8 2.6.8.x
rsync / rsync 2.6.9 2.6.9.x