扫描了一下自己服务器的出现安全漏洞

zgw1025

漏洞 unknown (873/tcp)
A vulnerability has been reported in rsync, which potentially can be exploited
by malicious users to read or write arbitrary files on a vulnerable system.

rsync is a software product for keeping files synched across multiple
systems. Rsync is a network-based program and typically communicates
over TCP port 873.

There is a flaw in this version of rsync which, due to an input validation
error, would allow a remote attacker to gain access to the remote system.

An attacker, exploiting this flaw, would need network access to the TCP port.

Successful exploitation requires that the rsync daemon is *not* running chrooted.

*** Since rsync does not advertise its version number
*** and since there are little details about this flaw at
*** this time, this might be a false positive

Solution : Upgrade to rsync 2.6.3 or newer
Risk factor : High
CVE_ID : CAN-2004-0792
BUGTRAQ_ID : 10938
NESSUS_ID : 14223

另： 我是装 redhat as4 的， rsync版本是 2.6.3
请问有什么办法可能解决。还有怎么改rsync的端口。

cuci

升级rsync

采风

关掉相关的服务或在防火墙里加入端口拦截

zgw1025

如果我把  873端口关了，我远程备份就连不上了啊。。

vcynosure

用iptables写下规则，只允许备份服务器连接这个端口

zgw1025

请教楼上大哥，这个规则，怎么写？

wolfop

如果你不用rsync直接把rsync server关闭算了。

初学摄影

You can use scp instead rcp,so it will more security.

寂寞烈火

[quote]原帖由 "初学摄影"]You can use scp instead rcp,so it will more security.[/quote 发表：

Scp,best choice!

双眼皮的猪

[quote]原帖由 "初学摄影"]You can use scp instead rcp,so it will more security.[/quote 发表：

如果用英文说话，尽量语法要标准点，两个短句都有语法错误啊~