CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10 matches found

RedhatCVE•added 2025/05/23 4:7 a.m.•20 views

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

9.8CVSS8.1AI score0.64277EPSS

Exploits9

NVD•added 2023/07/14 10:15 p.m.•42 views

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

9.8CVSS0.01362EPSS

Exploits1References1

OSV•added 2023/07/14 10:15 p.m.•7 views

DEBIAN-CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

9.8CVSS8.5AI score0.01362EPSS

Exploits1References1

OSV•added 2023/07/14 10:15 p.m.•13 views

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

9.8CVSS8AI score

Exploits0References1

OSV•added 2023/07/14 10:15 p.m.•0 views

UBUNTU-CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

9.8CVSS7.3AI score0.01362EPSS

Exploits1References3

CNNVD•added 2023/07/14 12:0 a.m.•1 views

Debian rsh-client 命令注入漏洞

Debian rsh-client is a command application for the Debian community in the United States. A security vulnerability previously existed in Debian rsh-client version 0.17-24, which stemmed from netkit-rcp allowing command injection via filename...

9.8CVSS8.4AI score0.01362EPSS

Exploits1References2

Vulnrichment•added 2023/07/14 12:0 a.m.•22 views

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

7.6AI score0.01362EPSS

Exploits1References1

Debian CVE•added 2023/07/14 12:0 a.m.•105 views

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

9.8CVSS7.5AI score0.01362EPSS

Exploits1

CVE•added 2023/07/14 12:0 a.m.•99 views

CVE-2023-38336

CVE-2023-38336 concerns netkit-rcp in rsh-client 0.17-24 where an rsh server can cause command/file handling issues. The connected Broadcom advisory describes a concrete exploitation: a malicious rsh server (or MITM) can overwrite arbitrary files on the rcp client by abusing the rcp operation’s o...

9.8CVSS7AI score0.01362EPSS

Exploits1References1Affected Software1