← Vulnerability feed

Vulnerability record · CVE-1999-0473 · published 7 April 1999

CVE-1999-0473: Andrew tridgell rsync vulnerability

AAndrew Tridgell · Rsync

The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.

2.1 CVSS 2.0 Low EPSS 0.32% · top 77.5%
2.1CVSS 2.0 base score
0.32%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.

AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/145
http://www.securityfocus.com/bid/145

Track CVE-1999-0473 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-0048Andrew tridgell rsync vulnerabilityMultiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers …EPSS 34%7.5CVE-2006-2083Andrew tridgell rsync vulnerabilityInteger overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arb…EPSS 3.6%7.5CVE-2003-0962Andrew tridgell rsync vulnerabilityHeap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape …EPSS 21%6.4CVE-2004-0792Andrew tridgell rsync vulnerabilityDirectory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to r…EPSS 2.3%5.0CVE-2004-0426Andrew tridgell rsync vulnerabilityrsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write fil…EPSS 3.4%

Source: NIST National Vulnerability Database (record CVE-1999-0473), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.