Security Advisory

CVE-2019-7283

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-31 18:00:00

Last updated 2024-08-04 20:46:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.

← Browse all CVEs View on cve.org ↗