CyberRota Analysis
AI-GeneratedRsync versions prior to 3.5.0 are vulnerable to a symlink following issue that enables local attackers to overwrite arbitrary files by exploiting predictable output paths, such as those specified by --log-file or --write-batch options. This vulnerability can lead to local privilege escalation if rsync is executed with elevated privileges, making it critical for organizations using rsync in privileged configurations to prioritize patching. Users should focus on updating to the latest version to mitigate the risk of unauthorized file manipulation and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject symlinks during ancillary file writes to redirect output to arbitrary filesystem locations, achieving local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations.