CVE-2004-0792: Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when...

Security readout for executives and security teams

CVE-2004-0792 is an old rsync directory traversal flaw. In rsync 2.6.2 and earlier, systems running with chroot disabled could allow an attacker to read or write certain files outside the intended sync area. The business risk is mainly legacy internet-facing or partner-facing rsync services that were never upgraded or hardened. Exposure is most plausible on legacy Unix/Linux systems still running rsync 2.6.2 or earlier, especially rsync daemon configurations where chroot is disabled. Modern distributions are unlikely to be exposed if vendor security updates from 2004 or later were applied. Treat this as a legacy exposure cleanup item with urgency if rsync is externally reachable or used by partners. It is not KEV-listed in the provided data, but read/write traversal against file synchronization infrastructure can become serious on neglected systems. Mitigation focus: Upgrade rsync using the relevant vendor security advisory or maintained distribution package.; Identify and retire rsync 2.6.2 or earlier wherever found.; Enable chroot for rsync modules where operationally appropriate..

Prepared

Jun 30, 2026, 04:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.