andrew tridgell rsync

Name: andrew tridgell rsync
Brand: andrew tridgell

productUS

cpe:2.3:a:andrew_tridgell:rsync:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical3high2medium1low

updated 2026-10-27

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2002-0048US	high10.0	34.0% (98th)	Exploit	no fix	2002-02-27	9 versions
CVE-2003-0962US	high7.5	23.5% (98th)	—	no fix	2003-12-15	16 versions
CVE-2006-2083US	high7.5	3.72% (90th)	—	no fix	2006-04-28	8 versions
CVE-2004-0426US	medium5.0	3.40% (89th)	—	no fix	2004-07-07	≤ 2.6
CVE-2004-0792US	medium6.4	2.32% (83rd)	—	no fix	2004-10-20	22 versions
CVE-1999-0473US	low2.1OT elevated	0.32% (25th)	—	no fix	1999-04-07	≤ 2.3.1

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-415Double Free1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.