<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style>body { line-height: 1.5; }body { font-size: 10.5pt; font-family: ????; color: rgb(0, 0, 0); line-height: 1.5; }</style>
</head>
<body>
<div><span></span>
<div>
<pre class="bz_comment_text" id="comment_text_6" style="font-size: medium; white-space: pre-wrap; width: 50em; line-height: normal;">Hi: </pre>
<pre class="bz_comment_text" id="comment_text_6" style="white-space: pre-wrap; width: 50em; line-height: normal; font-size: medium;"><span style="background-color: rgba(0, 0, 0, 0); font-size: 16px; line-height: 1.5;"> </span>In newest version rsync(3.1.1),directly modify the file path into absolute path is not hijack succeed due to the security checks,but using symbolic links still can bypass security checks and spoofing client.
A new bug I submitted :<a class="bz_bug_link bz_status_NEW" title="NEW - Rsync path spoofing attack vulnerability (rsync 3.1.1 tested)" href="https://bugzilla.samba.org/show_bug.cgi?id=10977" style="text-decoration: none !important; color: rgb(128, 144, 239);">https://bugzilla.samba.org/show_bug.cgi?id=10977</a></pre>
</div>
<div>
<pre class="bz_comment_text" id="comment_text_0" style="font-size: medium; white-space: pre-wrap; width: 50em; line-height: normal;">Online test:
rsync -avvzP 106.185.33.114::yaseng /tmp/yaseng</pre>
</div>
</div>
<div> </div>
</body>
</html>