{"id":"CVE-2002-0080","aliases":["EUVD-2002-0080","GHSA-mghq-fcpm-9vvg"],"status":"published","title":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges,...","description":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00525,"percentile":0.44799,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2002-03-15T05:00:00Z","modified":"2026-06-16T21:56:43Z","products":[{"vendor":"redhat","product":"linux"},{"vendor":"samba","product":"rsync"}],"references":[{"url":"http://www.iss.net/security_center/static/8463.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","Broken Link"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","tags":["vendor-advisory","x_refsource_CALDERA","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/4285","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0080"},{"url":"https://github.com/advisories/GHSA-mghq-fcpm-9vvg"}],"sources":{"cve":[{"id":"CVE-2002-0080","description":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","status":"published","published":"2002-06-25T04:00:00Z","modified":"2024-08-08T02:35:17.589Z","updated_at":"2026-11-02T14:33:55.642267Z"}],"euvd":[{"id":"EUVD-2002-0080","description":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","status":"published","published":"2002-06-25T04:00:00Z","modified":"2024-08-08T02:35:17Z","updated_at":"2026-11-03T01:15:02.530408Z"}],"ghsa":[{"id":"GHSA-mghq-fcpm-9vvg","title":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges,...","description":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","status":"published","published":"2022-04-30T18:18:29Z","modified":"2023-01-30T05:06:02Z","cwes":["CWE-269"],"updated_at":"2026-11-02T14:47:24.368617Z"}],"nvd":[{"id":"CVE-2002-0080","description":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.","status":"published","published":"2002-03-15T05:00:00Z","modified":"2026-06-16T21:56:43.807Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:00:41.313877Z"}]}}