Andrew Tridgell's vulnerability footprint centers on rsync, a widely deployed file-synchronization utility embedded in numerous backup, deployment, and data-replication workflows across servers and infrastructure. While the vendor's disclosure volume is modest, its contributions tend to acquire public exploit code, reflecting the utility's exposure in networked and automated contexts where proof-of-concept tooling attracts interest. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Andrew Tridgell over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-0048HIGH Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service an | Feb 27, 2002 | 10.0 | 53 | NO | YES |
CVE-2003-0962HIGH Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail. | Dec 15, 2003 | 7.5 | 30 | NO | NO |
CVE-2006-2083HIGH Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extende | Apr 28, 2006 | 7.5 | 20 | NO | NO |
CVE-2004-0792MEDIUM Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files. | Oct 20, 2004 | 6.4 | 18 | NO | NO |
CVE-2004-0426MEDIUM rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path | Jul 7, 2004 | 5.0 | 16 | NO | NO |
The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred. | Apr 7, 1999 | 2.1 | 11 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Andrew Tridgell.
Media articles that mention a CVE ID that affects a product developed by Andrew Tridgell — matched by CVE ID, not by vendor name.