commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-01-10T01:00:00

Updated: 2024-08-05T12:05:17.632Z

Reserved: 2019-01-09T00:00:00

Link: CVE-2018-20683

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-01-10T01:29:00.237

Modified: 2024-11-21T04:01:59.483

Link: CVE-2018-20683

cve-icon Redhat

No data.