CVE-2002-0080: Red Hat Linux

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.

Affected products

• Red Hat Linux: version 6.2 only; version 7.0 only; version 7.1 only; version 7.2 only
• Samba Rsync: before 2.5.3 (fixed in 2.5.3)

Published 2002-03-15. Last modified 2026-06-16.