← Database

CVE-2007-6199

CRITICAL CVSS: 9.3 Published: 2007-12-01 Modified: 2026-06-16

Description

rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module's hierarchy.

Affected Platforms

Rsync RsyncSlackware Slackware Linux

Weakness Type

CWE-16

References