CVE-2004-2093

CVE-2004-2093 describes a buffer overflow vulnerability in rsync versions 2.5.7 and earlier, specifically within the open_socket_out function. This flaw allows a local attacker to trigger a denial of service or potentially execute arbitrary code by supplying a crafted, long RSYNC_PROXY environment variable. While the CVSS score is 4.6, indicating a medium severity, the attack requires local access and does not grant additional privileges beyond the user's existing permissions. Although there is an ExploitDB entry (EDB-152) detailing a local stack overflow, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.