CVE-2023-38336

CVE-2023-38336 concerns netkit-rcp in rsh-client 0.17-24 where an rsh server can cause command/file handling issues. The connected Broadcom advisory describes a concrete exploitation: a malicious rsh server (or MITM) can overwrite arbitrary files on the rcp client by abusing the rcp operation’s o...

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

CVE-2023-38336: Improper Neutralization of Special Elements used in a Command

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

Debian rsh-client 命令注入漏洞

Debian rsh-client is a command application for the Debian community in the United States. A security vulnerability previously existed in Debian rsh-client version 0.17-24, which stemmed from netkit-rcp allowing command injection via filename...

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

VulnCheck KEV: CVE-2018-19518

University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without preventing argument injection, which might allow remote...

EulerOS 2.0 SP8 : rsh (EulerOS-SA-2022-1949)

According to the versions of the rsh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty...

Huawei EulerOS: Security Advisory for rsh (EulerOS-SA-2022-1949)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-7283

A vulnerability was found in rsh. The vulnerability occurs due to a possible overwrite of arbitrary files by a malicious rsh server. This flaw allows an attacker or a malicious rsh server or a Man-in-The-Middle attacker to overwrite arbitrary files in a directory on the rcp client machine...

Fedora: Security Advisory for rsh (FEDORA-2022-6748ae617b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for rsh (FEDORA-2022-82a6236ac7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rsh-0.17-100.fc35

The rsh package contains a set of programs which allow users to run commands on remote machines, login to other machines and copy files between machines rsh, rlogin and rcp. All three of these commands use rhosts style authentication. This package contains the clients needed for all of these...

[SECURITY] Fedora 34 Update: rsh-0.17-98.fc34

The rsh package contains a set of programs which allow users to run commands on remote machines, login to other machines and copy files between machines rsh, rlogin and rcp. All three of these commands use rhosts style authentication. This package contains the clients needed for all of these...

Fedora: Security Advisory for rsh (FEDORA-2022-dd808b5a2c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: rsh-0.17-101.fc36

The rsh package contains a set of programs which allow users to run commands on remote machines, login to other machines and copy files between machines rsh, rlogin and rcp. All three of these commands use rhosts style authentication. This package contains the clients needed for all of these...

CVE-2019-7282

A vulnerability was found in rsh. The vulnerability occurs due to bypass restrictions via the filename of . or an empty filename. This flaw allows an attacker to modify the permissions of the target directory on the client-side...

Ubuntu: Security Advisory (USN-5327-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5327-1: rsh vulnerability

Hiroyuki Yamamori discovered that rsh incorrectly handled certain filenames. If a user or automated system were tricked into connecting to a malicious rsh server, a remote attacker could possibly use this issue to modify directory permissions...

Ubuntu 18.04 LTS : rsh vulnerability (USN-5327-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5327-1 advisory. Hiroyuki Yamamori discovered that rsh incorrectly handled certain filenames. If a user or automated system were tricked into connecting to a malicious rsh server,...