CVE-2019-7282

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of

published January 31, 2019

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02067 · 81.2th percentile
Published
2019-01-31T18:00Z
EPSS history
Timeline
  • 31 JAN 18:00Z
    In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of
    cvelistv5