CVE-2008-1720
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might...
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
- Record
CVE-2008-1720- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
- Record
CVE-2008-1720- Updated
- 2026-11-02
EUVDEUVD-2008-1721 No score
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
- Record
EUVD-2008-1721- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m92h-xg74-c2hm No score
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might...
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
- Record
GHSA-m92h-xg74-c2hm- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
- Record
CVE-2008-1720- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-1720 No score
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
- Record
DEBIAN-CVE-2008-1720- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1720 is a high vulnerability (CVSS 7.5) in Samba Rsync, published April 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.98%, the 92nd percentile. Fixed in rsync 3.0.2-1.
References
secunia.com/advisories/29856
lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
security.gentoo.org/glsa/glsa-200804-16.xml
mail-archive.com/rsync-announce%40lists.samba.org/msg00057.html
usn.ubuntu.com/600-1
Show 26 moreShow less
sourceforge.net/project/shownotes.php?release_id=591462&group_id=69227
vupen.com/english/advisories/2008/1215/references
redhat.com/archives/fedora-package-announce/2008-April/msg00237.html
rsync.samba.org/ftp/rsync/security/rsync-3.0.1-xattr-alloc.diff
samba.anu.edu.au/rsync/security.html
mandriva.com/security/advisories?name=MDVSA-2008:084
securityfocus.com/bid/28726
securitytracker.com/id?1019835
debian.org/security/2008/dsa-1545
marc.info?l=bugtraq&m=125017764422557&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/41766
osvdb.org/44369
nvd.nist.gov/vuln/detail/CVE-2008-1720
access.redhat.com/security/cve/CVE-2008-1720
bugzilla.redhat.com/show_bug.cgi?id=441683
github.com/advisories/GHSA-m92h-xg74-c2hm
security-tracker.debian.org/tracker/CVE-2008-1720