Description: Sebastian Krahmer has reported a vulnerability in rsync, which can potentially be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to an off-by-one error within the "f_name()" function in flist.c and can be exploited to cause a one-byte stack-based buffer overflow via an overly long directory name.
Successful exploitation may allow execution of arbitrary code.
The vulnerability is reported in version 2.6.9. Other versions may also be affected.
Solution: Use rsync in a trusted environment only.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
