CVE-2002-0080: Low severity Samba rsync vulnerability
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0080?
CVE-2002-0080 is considered a moderate severity vulnerability that could allow local users to gain unauthorized access to certain files.
How do I fix CVE-2002-0080?
To fix CVE-2002-0080, it is recommended to upgrade rsync to a version later than 2.5.3.
What software is affected by CVE-2002-0080?
CVE-2002-0080 affects multiple versions of rsync running in daemon mode, particularly those bundled with Red Hat Linux versions 6.2, 7.0, 7.1, and 7.2.
What impact could CVE-2002-0080 have on my system?
The impact of CVE-2002-0080 could allow local users to exploit supplemental group privileges, potentially leading to unauthorized file access.
Who can exploit CVE-2002-0080?
Local users on the affected systems can exploit CVE-2002-0080 to read files that are normally restricted.