CVE-1999-0473 Misconfiguration in n/a
An attacker can inadvertently change the permissions of the client's working directory to match the transferred directory, potentially exposing sensitive files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0473?
CVE-1999-0473 is a low-severity vulnerability in n/a, published on 29 Sep 1999. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred.
Which versions are affected by CVE-1999-0473?
It affects 1 product.
Products include Andrew Tridgell Rsync.
How do I fix CVE-1999-0473?
No fix has been published for CVE-1999-0473 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-0473 being exploited?
There is no known exploitation of CVE-1999-0473 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-r9j2-6gp6-7qcv.