CVE-2019-7282

Description

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.829

Associated Vulnerability

Vulnerability	OS Platform
client programs for remote shell connections (USN-5327-1) rsh-client_0.17-17ubuntu0.1_i386.deb	Linux
client programs for remote shell connections (USN-5327-1) rsh-client_0.17-17ubuntu0.1_amd64.deb	Linux
client programs for remote shell connections (USN-5327-1) rsh-server_0.17-17ubuntu0.1_i386.deb	Linux
client programs for remote shell connections (USN-5327-1) rsh-server_0.17-17ubuntu0.1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234