NE
Product
Netkit
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Netkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38336 | 9.8 | Jul 14 | netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778 Affected: 0.17-24 |
| CVE-2019-7283 | 7.4 | Jan 31 | An issue was discovered in rcp in NetKit through 0.17 Affected: through 0.17 |
| CVE-2019-7282 | 5.9 | Jan 31 | In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of Affected: through 0.17 |
| CVE-2006-6008 | – | Nov 21 | ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote… Affected: 0.17 |
Showing 4
