Launchpad.net

CVE 2014-9512

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.

See the CVE page on Mitre.org for more details.