Summary
Hiroyuki Yamamori discovered that rsh incorrectly handled certain
filenames. If a user or automated system were tricked into connecting to a
malicious rsh server, a remote attacker could possibly use this issue to
modify directory permissions.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | netkit-rsh | 0.17-17ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via th…
References
-
report
https://ubuntu.com/security/CVE-2019-7282