RSync Daemon模式辅助组权利漏洞发布时间：2002-03-19 更新时间：2002-03-19 严重程度：高 威胁程度：本地管理员权限 错误类型：访问验证错误 利用方式：服务器模式 BUGTRAQ ID：4285 受影响系统 rsync rsync 2.4.1详细描述 rsync是一款用来通过网络来同步文件和目录结构的程序，一般以ROOT用户运行。 在某些环境下，rsync在它启动之后丢弃辅助组权利会失败，这一般出现在rsync以命令行使用守护程序的模式下，导致进程继承启动进程用户的组属性，在这种情况下，rsync没有正确的丢弃权利，导致权利提升。 测试代码 尚无 解决方案 下载使用升级程序： rsync rsync 2.4.1: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.4.3: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.4.4: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.4.6: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html Mandrake Upgrade rsync-2.5.4-1.2mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 7.1. Mandrake Upgrade rsync-2.5.4-1.2mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 7.1 Source RPM. Mandrake Upgrade rsync-2.5.4-1.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 7.2. Mandrake Upgrade rsync-2.5.4-1.1mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 7.2 Source RPM. Mandrake Upgrade rsync-2.5.4-1.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0. Mandrake Upgrade rsync-2.5.4-1.1mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0 Source RPM. Mandrake Upgrade rsync-2.5.4-1.1mdk.ppc.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0 PPC. Mandrake Upgrade rsync-2.5.4-1.1mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.0 PPC Source RPM. Mandrake Upgrade rsync-2.5.4-1.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1. Mandrake Upgrade rsync-2.5.4-1.1mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Linux 8.1 Source RPM. Mandrake Upgrade rsync-2.5.4-1.2mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 1.0.1. Mandrake Upgrade rsync-2.5.4-1.2mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Corporate Server 1.0.1 Source RPM. Mandrake Upgrade rsync-2.5.4-1.1mdk.i586.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Single Network Firewall 7.2. Mandrake Upgrade rsync-2.5.4-1.1mdk.src.rpm http://www.mandrakesecure.net/en/ftp.php Mandrake Single Network Firewall 7.2 Source RPM. rsync rsync 2.5.0-2: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.5.0-1: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.5.1_1: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.5.1: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html rsync rsync 2.5.2: rsync Upgrade rsync 2.5.4 http://samba.anu.edu.au/rsync/download.html 相关信息 参考：http://online.securityfocus.com/advisories/3962 |
