ByteOS Network

Vulnerability Details :

CVE-2007-6200

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-01 Dec, 2007 | 01:00

Updated At-07 Aug, 2024 | 15:54

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:01 Dec, 2007 | 01:00

Updated At:07 Aug, 2024 | 15:54

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/28412	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/4057	vdb-entry x_refsource_VUPEN
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html	vendor-advisory x_refsource_APPLE
http://www.redhat.com/support/errata/RHSA-2011-0999.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/26639	vdb-entry x_refsource_BID
http://www.vupen.com/english/advisories/2008/2268	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/27853	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/487991/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/27863	third-party-advisory x_refsource_SECUNIA
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257	x_refsource_CONFIRM
http://rsync.samba.org/security.html#s3_0_0	x_refsource_CONFIRM
http://secunia.com/advisories/28457	third-party-advisory x_refsource_SECUNIA
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011	vendor-advisory x_refsource_MANDRIVA
http://secunia.com/advisories/31326	third-party-advisory x_refsource_SECUNIA
http://securitytracker.com/id?1019012	vdb-entry x_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html	vendor-advisory x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/28412

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2007/4057

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0999.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/26639

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.vupen.com/english/advisories/2008/2268

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/27853

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/487991/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/27863

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257

Resource:

x_refsource_CONFIRM

Hyperlink: http://rsync.samba.org/security.html#s3_0_0

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/28457

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://secunia.com/advisories/31326

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://securitytracker.com/id?1019012

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/28412	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2007/4057	vdb-entry x_refsource_VUPEN x_transferred
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0999.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/26639	vdb-entry x_refsource_BID x_transferred
http://www.vupen.com/english/advisories/2008/2268	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/27853	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/487991/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/27863	third-party-advisory x_refsource_SECUNIA x_transferred
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257	x_refsource_CONFIRM x_transferred
http://rsync.samba.org/security.html#s3_0_0	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/28457	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011	vendor-advisory x_refsource_MANDRIVA x_transferred
http://secunia.com/advisories/31326	third-party-advisory x_refsource_SECUNIA x_transferred
http://securitytracker.com/id?1019012	vdb-entry x_refsource_SECTRACK x_transferred
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html	vendor-advisory x_refsource_SUSE x_transferred

Hyperlink: http://secunia.com/advisories/28412

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/4057

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0999.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/26639

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2268

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/27853

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/487991/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://secunia.com/advisories/27863

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://rsync.samba.org/security.html#s3_0_0

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/28457

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://secunia.com/advisories/31326

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://securitytracker.com/id?1019012

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:01 Dec, 2007 | 06:46

Updated At:15 Oct, 2018 | 21:50

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Slackware

>>slackware_linux>>8.1

cpe:2.3:o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>9.0

cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>9.1

cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>10.0

cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>10.1

cpe:2.3:o:slackware:slackware_linux:10.1:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>10.2

cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>11.0

cpe:2.3:o:slackware:slackware_linux:11.0:*:*:*:*:*:*:*

Slackware

>>slackware_linux>>12.0

cpe:2.3:o:slackware:slackware_linux:12.0:*:*:*:*:*:*:*

rsync>>rsync>>2.3.1

cpe:2.3:a:rsync:rsync:2.3.1:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2

cpe:2.3:a:rsync:rsync:2.3.2:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.2alpha

cpe:2.3:a:rsync:rsync:2.3.2_1.2alpha:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.2arm

cpe:2.3:a:rsync:rsync:2.3.2_1.2arm:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.2intel

cpe:2.3:a:rsync:rsync:2.3.2_1.2intel:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.2m68k

cpe:2.3:a:rsync:rsync:2.3.2_1.2m68k:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.2ppc

cpe:2.3:a:rsync:rsync:2.3.2_1.2ppc:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.2sparc

cpe:2.3:a:rsync:rsync:2.3.2_1.2sparc:*:*:*:*:*:*:*

rsync>>rsync>>2.3.2_1.3

cpe:2.3:a:rsync:rsync:2.3.2_1.3:*:*:*:*:*:*:*

rsync>>rsync>>2.4.0

cpe:2.3:a:rsync:rsync:2.4.0:*:*:*:*:*:*:*

rsync>>rsync>>2.4.1

cpe:2.3:a:rsync:rsync:2.4.1:*:*:*:*:*:*:*

rsync>>rsync>>2.4.3

cpe:2.3:a:rsync:rsync:2.4.3:*:*:*:*:*:*:*

rsync>>rsync>>2.4.4

cpe:2.3:a:rsync:rsync:2.4.4:*:*:*:*:*:*:*

rsync>>rsync>>2.4.5

cpe:2.3:a:rsync:rsync:2.4.5:*:*:*:*:*:*:*

rsync>>rsync>>2.4.6

cpe:2.3:a:rsync:rsync:2.4.6:*:*:*:*:*:*:*

rsync>>rsync>>2.4.8

cpe:2.3:a:rsync:rsync:2.4.8:*:*:*:*:*:*:*

rsync>>rsync>>2.5.0

cpe:2.3:a:rsync:rsync:2.5.0:*:*:*:*:*:*:*

rsync>>rsync>>2.5.1

cpe:2.3:a:rsync:rsync:2.5.1:*:*:*:*:*:*:*

rsync>>rsync>>2.5.2

cpe:2.3:a:rsync:rsync:2.5.2:*:*:*:*:*:*:*

rsync>>rsync>>2.5.3

cpe:2.3:a:rsync:rsync:2.5.3:*:*:*:*:*:*:*

rsync>>rsync>>2.5.4

cpe:2.3:a:rsync:rsync:2.5.4:*:*:*:*:*:*:*

rsync>>rsync>>2.5.5

cpe:2.3:a:rsync:rsync:2.5.5:*:*:*:*:*:*:*

rsync>>rsync>>2.5.6

cpe:2.3:a:rsync:rsync:2.5.6:*:*:*:*:*:*:*

rsync>>rsync>>2.5.7

cpe:2.3:a:rsync:rsync:2.5.7:*:*:*:*:*:*:*

rsync>>rsync>>2.6

cpe:2.3:a:rsync:rsync:2.6:*:*:*:*:*:*:*

rsync>>rsync>>2.6.1

cpe:2.3:a:rsync:rsync:2.6.1:*:*:*:*:*:*:*

rsync>>rsync>>2.6.2

cpe:2.3:a:rsync:rsync:2.6.2:*:*:*:*:*:*:*

rsync>>rsync>>2.6.5

cpe:2.3:a:rsync:rsync:2.6.5:*:*:*:*:*:*:*

rsync>>rsync>>2.6.6

cpe:2.3:a:rsync:rsync:2.6.6:*:*:*:*:*:*:*

rsync>>rsync>>2.6.7

cpe:2.3:a:rsync:rsync:2.6.7:*:*:*:*:*:*:*

rsync>>rsync>>2.6.8

cpe:2.3:a:rsync:rsync:2.6.8:*:*:*:*:*:*:*

rsync>>rsync>>2.6.9

cpe:2.3:a:rsync:rsync:2.6.9:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2007-12-06T00:00:00

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-6200 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html	cve@mitre.org	N/A
http://rsync.samba.org/security.html#s3_0_0	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/27853	cve@mitre.org	N/A
http://secunia.com/advisories/27863	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/28412	cve@mitre.org	N/A
http://secunia.com/advisories/28457	cve@mitre.org	N/A
http://secunia.com/advisories/31326	cve@mitre.org	N/A
http://securitytracker.com/id?1019012	cve@mitre.org	N/A
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257	cve@mitre.org	N/A
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2011-0999.html	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/487991/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/26639	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/4057	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/2268	cve@mitre.org	N/A

Hyperlink: http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://rsync.samba.org/security.html#s3_0_0

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/27853

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27863

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://secunia.com/advisories/28412

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/28457

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/31326

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securitytracker.com/id?1019012

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0257

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:011

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0999.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/487991/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/26639

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/4057

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/2268

Source: cve@mitre.org

Resource: N/A

Similar CVEs

107Records found

CVE-2020-3227

Matching Score-4

Assigner-Cisco Systems, Inc.

View Details

Matching Score-4

Assigner-Cisco Systems, Inc.

CVSS Score-9.8||CRITICAL

EPSS-15.49% / 94.39%

7 Day CHG~0.00%

Published-03 Jun, 2020 | 17:42

Updated-15 Nov, 2024 | 17:14

Cisco IOx for IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is due to incorrect handling of requests for authorization tokens. An attacker could exploit this vulnerability by using a crafted API call to request such a token. An exploit could allow the attacker to obtain an authorization token and execute any of the IOx API commands on an affected device.

Vendor-Cisco Systems, Inc.

Product-ios_xe Cisco IOS XE Software 16.3.1

CWE ID-CWE-264

Not Available

CWE ID-CWE-863

Incorrect Authorization

CVE-2015-9010

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.09%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 18:00

Updated-16 Sep, 2024 | 21:07

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-264

Not Available

CVE-2015-9008

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.09%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 18:00

Updated-17 Sep, 2024 | 04:25

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-264

Not Available

CVE-2015-9013

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.09%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 18:00

Updated-17 Sep, 2024 | 03:43

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-264

Not Available

CVE-2015-9009

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.09%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 18:00

Updated-16 Sep, 2024 | 23:15

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-264

Not Available

CVE-2007-6685

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.63% / 69.35%

7 Day CHG~0.00%

Published-17 Jan, 2008 | 01:00

Updated-07 Aug, 2024 | 16:18

Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unknown vectors.

Vendor-menalto n/a

Product-gallery_publish_xp_module n/a

CWE ID-CWE-264

Not Available

CVE-2016-8484

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-4

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.09%

7 Day CHG~0.00%

Published-04 Apr, 2018 | 18:00

Updated-17 Sep, 2024 | 03:53

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-264

Not Available

CVE-2007-6200

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs