CVE-2019-7282: Medium severity netkit vulnerability
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-7282?
CVE-2019-7282 has been classified as a medium severity vulnerability due to its potential to allow unauthorized access to file permissions.
How do I fix CVE-2019-7282?
To fix CVE-2019-7282, update the NetKit package to version 0.18 or later, or apply the relevant patches provided by your Linux distribution.
Which software is affected by CVE-2019-7282?
CVE-2019-7282 affects NetKit versions up to 0.17 and specific versions of Debian and Fedora distributions.
What exploitation possibilities exist for CVE-2019-7282?
An attacker can exploit CVE-2019-7282 to bypass access restrictions by manipulating file names, potentially compromising directory permissions on the client side.
Is there a workaround for CVE-2019-7282?
A possible workaround for CVE-2019-7282 includes disabling the use of rcp if not necessary, to mitigate the risk of exploitation.