Every CVE Search/ Get API key

CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows...

10.0 HighFix available

CVE-2007-6200 is a high vulnerability (CVSS 10.0) in Rsync, published December 1, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.90%, the 92nd percentile. Fixed in rsync 2.6.9-6.

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Exploit likelihood

4.90%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Record
CVE-2007-6200
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Record
CVE-2007-6200
Updated
2026-11-02
EUVDEUVD-2007-6168 No score

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Record
EUVD-2007-6168
Updated
2026-11-03
GitHub AdvisoriesGHSA-2w9v-97wx-v5mj No score

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows...

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Record
GHSA-2w9v-97wx-v5mj
Updated
2026-11-02
OSV No score

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Record
CVE-2007-6200
Updated
2026-11-02
OSVDEBIAN-CVE-2007-6200 No score

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

Record
DEBIAN-CVE-2007-6200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rsync
Debian:12
 before 2.6.9-6
2.6.9-6
rsync
Debian:13
 before 2.6.9-6
2.6.9-6
rsync
Debian:14
 before 2.6.9-6
2.6.9-6
rsync
Red Hat:enterprise_linux:5::client
 before 0:3.0.6-4.el5
0:3.0.6-4.el5
rsync-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.6-4.el5
0:3.0.6-4.el5
rsync
Red Hat:enterprise_linux:5::server
 before 0:3.0.6-4.el5
0:3.0.6-4.el5
rsync-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.6-4.el5
0:3.0.6-4.el5

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 26 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open