Test ID:	1.3.6.1.4.1.25623.1.0.58579
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 1360-1 (rsync)
Summary:	Debian Security Advisory DSA 1360-1 (rsync)
Description:	The remote host is missing an update to rsync announced via advisory DSA 1360-1. Sebastian Krahmer discovered that rsync, a fast remote file copy program, contains an off-by-one error which might allow remote attackers to execute arbitary code via long directory names. For the stable distribution (etch), this problem has been fixed in version 2.6.9-2etch1. For the old stable distribution (sarge), this problem is not presnt. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your rsync package. Solution: http://www.securityspace.com/smysecure/catid.html?in=DSA%201360-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4091 Bugtraq: 20070823 FLEA-2007-0047-1 rsync (Google Search) http://www.securityfocus.com/archive/1/archive/1/477628/100/0/threaded Debian Security Information: DSA-1360 (Google Search) http://www.debian.org/security/2007/dsa-1360 http://security.gentoo.org/glsa/glsa-200709-13.xml http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.481089 SuSE Security Announcement: SUSE-SR:2007:017 (Google Search) http://www.novell.com/linux/security/advisories/2007_17_sr.html http://www.trustix.org/errata/2007/0026/ http://www.ubuntu.com/usn/usn-500-1 BugTraq ID: 25336 http://www.securityfocus.com/bid/25336 http://www.vupen.com/english/advisories/2007/2915 http://secunia.com/advisories/26493 http://secunia.com/advisories/26518 http://secunia.com/advisories/26537 http://secunia.com/advisories/26548 http://secunia.com/advisories/26634 http://secunia.com/advisories/26543 http://secunia.com/advisories/26822 http://secunia.com/advisories/26911 http://secunia.com/advisories/27896 XForce ISS Database: rsync-fname-bo(36072) http://xforce.iss.net/xforce/xfdb/36072
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: