CVE-2004-0792 Path traversal in n/a

Medium 6.4 Published 18 Aug 2004 Updated 8 Aug 2024

Attackers can read or write arbitrary files via directory traversal in rsync when chroot is disabled, requiring an upgrade to secure the system.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2004-0792?

CVE-2004-0792 is a medium-severity path traversal vulnerability in n/a, published on 18 Aug 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

Which versions are affected by CVE-2004-0792?

It affects 1 product.

Linux distribution packages (8)

`rsync` Red Hat:enterprise_linux:3::as	All versions	`0:2.5.7-5.3E`
`rsync-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`0:2.5.7-5.3E`
`rsync` Red Hat:enterprise_linux:3::desktop	All versions	`0:2.5.7-5.3E`
`rsync-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`0:2.5.7-5.3E`
`rsync` Red Hat:enterprise_linux:3::es	All versions	`0:2.5.7-5.3E`
`rsync-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`0:2.5.7-5.3E`
`rsync` Red Hat:enterprise_linux:3::ws	All versions	`0:2.5.7-5.3E`
`rsync-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`0:2.5.7-5.3E`

Products include Andrew Tridgell Rsync.

How do I fix CVE-2004-0792?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2004-0792 being exploited?

There is no known exploitation of CVE-2004-0792 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2004-0792, DSA-538, GHSA-6v45-fh9q-v72q, RHSA-2004:436.