← Vulnerability feed

Vulnerability record · CVE-2002-0048 · published 27 February 2002

CVE-2002-0048: Andrew tridgell rsync vulnerability

AAndrew Tridgell · Rsync

Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.

10.0 CVSS 2.0 High EPSS 34% · top 1.7%
10.0CVSS 2.0 base score
34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
28References
16 Jun 2026Last modified by NVD

Description

Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458
http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html PatchVendor Advisory
http://marc.info/?l=bugtraq&m=101223214906963&w=2
http://marc.info/?l=bugtraq&m=101223603321315&w=2
http://online.securityfocus.com/advisories/3839
http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt
http://www.debian.org/security/2002/dsa-106 Patch
http://www.iss.net/security_center/static/7993.php
http://www.kb.cert.org/vuls/id/800635 US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php
http://www.linuxsecurity.com/advisories/other_advisory-1853.html
http://www.redhat.com/support/errata/RHSA-2002-018.html
http://www.securityfocus.com/bid/3958 PatchVendor Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458
http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html PatchVendor Advisory
http://marc.info/?l=bugtraq&m=101223214906963&w=2
http://marc.info/?l=bugtraq&m=101223603321315&w=2
http://online.securityfocus.com/advisories/3839
http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt
http://www.debian.org/security/2002/dsa-106 Patch
http://www.iss.net/security_center/static/7993.php
http://www.kb.cert.org/vuls/id/800635 US Government Resource
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php
http://www.linuxsecurity.com/advisories/other_advisory-1853.html
http://www.redhat.com/support/errata/RHSA-2002-018.html
http://www.securityfocus.com/bid/3958 PatchVendor Advisory

Track CVE-2002-0048 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-2083Andrew tridgell rsync vulnerabilityInteger overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arb…EPSS 3.6%7.5CVE-2003-0962Andrew tridgell rsync vulnerabilityHeap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape …EPSS 21%6.4CVE-2004-0792Andrew tridgell rsync vulnerabilityDirectory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to r…EPSS 2.3%5.0CVE-2004-0426Andrew tridgell rsync vulnerabilityrsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write fil…EPSS 3.4%2.1CVE-1999-0473Andrew tridgell rsync vulnerabilityThe rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory b…EPSS 0.32%

Source: NIST National Vulnerability Database (record CVE-2002-0048), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.