A vulnerability has been reported in rsync, allowing malicious people to write files outside the intended directory.

The problem is that it is possible to write files to directories outside a module's path, if the user running the rsync daemon has write permissions for these.

Successful exploitation requires that the rsync daemon isn't running chrooted.

The vulnerability affects versions prior to 2.6.1.

Solution
Update to version 2.6.1.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by vendor.

Deep Links
Links available to Secunia VIM customers