← Vulnerability feed

Vulnerability record · CVE-2004-0792 · published 20 October 2004

CVE-2004-0792: Andrew tridgell rsync vulnerability

AAndrew Tridgell · Rsync

Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

6.4 CVSS 2.0 Medium EPSS 2.3% · top 17.2%
6.4CVSS 2.0 base score
2.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=109268147522290&w=2
http://marc.info/?l=bugtraq&m=109277141223839&w=2
http://samba.org/rsync/#security_aug04
http://www.debian.org/security/2004/dsa-538 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200408-17.xml PatchVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:083
http://www.novell.com/linux/security/advisories/2004_26_rsync.html
http://www.trustix.net/errata/2004/0042/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10561
http://marc.info/?l=bugtraq&m=109268147522290&w=2
http://marc.info/?l=bugtraq&m=109277141223839&w=2
http://samba.org/rsync/#security_aug04
http://www.debian.org/security/2004/dsa-538 PatchVendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200408-17.xml PatchVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:083
http://www.novell.com/linux/security/advisories/2004_26_rsync.html
http://www.trustix.net/errata/2004/0042/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10561

Track CVE-2004-0792 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-0048Andrew tridgell rsync vulnerabilityMultiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers …EPSS 34%7.5CVE-2006-2083Andrew tridgell rsync vulnerabilityInteger overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arb…EPSS 3.6%7.5CVE-2003-0962Andrew tridgell rsync vulnerabilityHeap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape …EPSS 21%5.0CVE-2004-0426Andrew tridgell rsync vulnerabilityrsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write fil…EPSS 3.4%2.1CVE-1999-0473Andrew tridgell rsync vulnerabilityThe rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory b…EPSS 0.32%

Source: NIST National Vulnerability Database (record CVE-2004-0792), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.