CVE-2007-6200
EPSS 5.4%
Description
Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.
How to fix CVE-2007-6200
To remediate CVE-2007-6200, upgrade the affected package to a fixed version below.
- Debian/rsync—upgrade to 2.6.9-6 or later
Is CVE-2007-6200 being exploited?
Moderate — EPSS is 5.4%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 2.6.9-6