Mandriva Linux Security Advisory – rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files via unknown vectors that cause rsync to create a symlink that points outside of the module’s hierarchy. Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/62566/MDVSA-2008-011.txt
Source: https://packetstormsecurity.com/files/62566/Mandriva-Linux-Security-Advisory-2008-011.html