Executive Summary

Informations
Name CVE-2011-1097 First vendor Publication 2011-03-30
Vendor Cve Last vendor Modification 2023-02-13

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:P/I:P/A:P)
Cvss Base Score 5.1 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity High
Cvss Expoit Score 4.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1097

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14049
 
Oval ID: oval:org.mitre.oval:def:14049
Title: USN-1124-1 -- rsync vulnerability
Description: rsync: fast remote file copy program rsync could be made to crash or run programs as your login if it connected to a malicious server.
Family: unix Class: patch
Reference(s): USN-1124-1
CVE-2011-1097
 Version: 5
Platform(s): Ubuntu 10.10
Ubuntu 9.10
Ubuntu 10.04
 Product(s): rsync
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21910
 
Oval ID: oval:org.mitre.oval:def:21910
Title: RHSA-2011:0390: rsync security update (Moderate)
Description: rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
Family: unix Class: patch
Reference(s): RHSA-2011:0390-01
CVE-2011-1097
 Version: 4
Platform(s): Red Hat Enterprise Linux 6
 Product(s): rsync
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23356
 
Oval ID: oval:org.mitre.oval:def:23356
Title: ELSA-2011:0390: rsync security update (Moderate)
Description: rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
Family: unix Class: patch
Reference(s): ELSA-2011:0390-01
CVE-2011-1097
 Version: 6
Platform(s): Oracle Linux 6
 Product(s): rsync
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27919
 
Oval ID: oval:org.mitre.oval:def:27919
Title: DEPRECATED: ELSA-2011-0390 -- rsync security update (moderate)
Description: [3.0.6-5.1] - Add upstream patch to fix CVE-2011-1097 - Incremental file-list corruption due to temporary file_extra_cnt increments Resolves: #684932
Family: unix Class: patch
Reference(s): ELSA-2011-0390
CVE-2011-1097
 Version: 4
Platform(s): Oracle Linux 6
 Product(s): rsync
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8

OpenVAS Exploits

Date Description
2012-06-06 Name : RedHat Update for rsync RHSA-2011:0390-01
File : nvt/gb_RHSA-2011_0390-01_rsync.nasl
2011-08-03 Name : FreeBSD Ports: rsync
File : nvt/freebsd_rsync4.nasl
2011-05-10 Name : Ubuntu Update for rsync USN-1124-1
File : nvt/gb_ubuntu_USN_1124_1.nasl
2011-04-22 Name : Rsync Multiple Denial of Service Vulnerabilities (Windows)
File : nvt/gb_rsync_mult_dos_vuln.nasl
2011-04-11 Name : Fedora Update for rsync FEDORA-2011-4413
File : nvt/gb_fedora_2011_4413_rsync_fc14.nasl
2011-04-11 Name : Fedora Update for rsync FEDORA-2011-4427
File : nvt/gb_fedora_2011_4427_rsync_fc13.nasl
2011-04-11 Name : Mandriva Update for rsync MDVSA-2011:066 (rsync)
File : nvt/gb_mandriva_MDVSA_2011_066.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
74996 rsync Incremental Recursion Remote Memory Corruption DoS

Nessus® Vulnerability Scanner

Date Description
2014-12-15 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201412-09.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_3_rsync-110404.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_4_rsync-110404.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing a security update.
File : oraclelinux_ELSA-2011-0390.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Scientific Linux host is missing a security update.
File : sl_20110329_rsync_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2011-07-21 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_9a777c23b31011e0832d00215c6a37bb.nasl - Type : ACT_GATHER_INFO
2011-06-13 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1124-1.nasl - Type : ACT_GATHER_INFO
2011-05-06 Name : The remote openSUSE host is missing a security update.
File : suse_11_2_rsync-110404.nasl - Type : ACT_GATHER_INFO
2011-05-06 Name : The remote SuSE 11 host is missing a security update.
File : suse_11_rsync-110404.nasl - Type : ACT_GATHER_INFO
2011-04-08 Name : The remote Fedora host is missing a security update.
File : fedora_2011-4413.nasl - Type : ACT_GATHER_INFO
2011-04-08 Name : The remote Fedora host is missing a security update.
File : fedora_2011-4427.nasl - Type : ACT_GATHER_INFO
2011-04-06 Name : The remote Fedora host is missing a security update.
File : fedora_2011-4389.nasl - Type : ACT_GATHER_INFO
2011-04-06 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2011-066.nasl - Type : ACT_GATHER_INFO
2011-03-29 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-0390.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
CONFIRM http://rsync.samba.org/ftp/rsync/src/rsync-3.0.8-NEWS
https://bugzilla.redhat.com/show_bug.cgi?id=675036
https://bugzilla.samba.org/show_bug.cgi?id=7936
FEDORA http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057641.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057736.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057737.html
HP http://marc.info/?l=bugtraq&m=133226187115472&w=2
MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2011:066
MISC http://gitweb.samba.org/?p=rsync.git%3Ba=commit%3Bh=83b94efa6b60a3ff5eee4c5f7...
MLIST http://lists.samba.org/archive/rsync/2011-January/025988.html
REDHAT http://www.redhat.com/support/errata/RHSA-2011-0390.html
SECTRACK http://securitytracker.com/id?1025256
SECUNIA http://secunia.com/advisories/44071
http://secunia.com/advisories/44088
SUSE http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
VUPEN http://www.vupen.com/english/advisories/2011/0792
http://www.vupen.com/english/advisories/2011/0793
http://www.vupen.com/english/advisories/2011/0873
http://www.vupen.com/english/advisories/2011/0876

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
Date Informations
2024-02-02 01:15:37
  • Multiple Updates
2024-02-01 12:04:22
  • Multiple Updates
2023-09-05 12:14:37
  • Multiple Updates
2023-09-05 01:04:14
  • Multiple Updates
2023-09-02 12:14:40
  • Multiple Updates
2023-09-02 01:04:18
  • Multiple Updates
2023-08-12 12:17:41
  • Multiple Updates
2023-08-12 01:04:19
  • Multiple Updates
2023-08-11 12:14:45
  • Multiple Updates
2023-08-11 01:04:27
  • Multiple Updates
2023-08-06 12:14:11
  • Multiple Updates
2023-08-06 01:04:19
  • Multiple Updates
2023-08-04 12:14:16
  • Multiple Updates
2023-08-04 01:04:20
  • Multiple Updates
2023-07-14 12:14:14
  • Multiple Updates
2023-07-14 01:04:18
  • Multiple Updates
2023-03-29 01:16:09
  • Multiple Updates
2023-03-28 12:04:24
  • Multiple Updates
2023-02-13 09:28:59
  • Multiple Updates
2022-10-11 12:12:41
  • Multiple Updates
2022-10-11 01:04:04
  • Multiple Updates
2021-05-04 12:14:10
  • Multiple Updates
2021-04-22 01:15:22
  • Multiple Updates
2020-05-23 00:27:58
  • Multiple Updates
2016-04-26 20:37:09
  • Multiple Updates
2014-12-16 13:24:49
  • Multiple Updates
2014-06-14 13:30:30
  • Multiple Updates
2014-02-21 13:21:41
  • Multiple Updates
2014-02-17 11:00:59
  • Multiple Updates
2013-05-10 22:56:14
  • Multiple Updates