← Vulnerability feed

Vulnerability record · CVE-2004-0426 · published 7 July 2004

CVE-2004-0426: Andrew tridgell rsync vulnerability

AAndrew Tridgell · Rsync

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.

5.0 CVSS 2.0 Medium EPSS 3.4% · top 11.6%
5.0CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
46References
16 Jun 2026Last modified by NVD

Description

rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=108515912212018&w=2
http://rsync.samba.org/ Vendor Advisory
http://secunia.com/advisories/11514
http://secunia.com/advisories/11515
http://secunia.com/advisories/11523
http://secunia.com/advisories/11537
http://secunia.com/advisories/11583
http://secunia.com/advisories/11669
http://secunia.com/advisories/11688
http://secunia.com/advisories/11993
http://secunia.com/advisories/12054
http://www.ciac.org/ciac/bulletins/o-134.shtml
http://www.ciac.org/ciac/bulletins/o-212.shtml
http://www.debian.org/security/2004/dsa-499 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2004:042
http://www.redhat.com/support/errata/RHSA-2004-192.html PatchVendor Advisory
http://www.securityfocus.com/bid/10247
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.403462
http://www.trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/16014
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967
http://marc.info/?l=bugtraq&m=108515912212018&w=2
http://rsync.samba.org/ Vendor Advisory
http://secunia.com/advisories/11514
http://secunia.com/advisories/11515
http://secunia.com/advisories/11523
http://secunia.com/advisories/11537
http://secunia.com/advisories/11583
http://secunia.com/advisories/11669
http://secunia.com/advisories/11688
http://secunia.com/advisories/11993
http://secunia.com/advisories/12054
http://www.ciac.org/ciac/bulletins/o-134.shtml
http://www.ciac.org/ciac/bulletins/o-212.shtml
http://www.debian.org/security/2004/dsa-499 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2004:042
http://www.redhat.com/support/errata/RHSA-2004-192.html PatchVendor Advisory

Track CVE-2004-0426 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-0048Andrew tridgell rsync vulnerabilityMultiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers …EPSS 34%7.5CVE-2006-2083Andrew tridgell rsync vulnerabilityInteger overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arb…EPSS 3.6%7.5CVE-2003-0962Andrew tridgell rsync vulnerabilityHeap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape …EPSS 21%6.4CVE-2004-0792Andrew tridgell rsync vulnerabilityDirectory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to r…EPSS 2.3%2.1CVE-1999-0473Andrew tridgell rsync vulnerabilityThe rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory b…EPSS 0.32%

Source: NIST National Vulnerability Database (record CVE-2004-0426), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.