CVE-2023-38336: Command Injection
Published Jun 28, 2023
·Updated
netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.
Affected Software
1 affected component
Netkit Netkit=0.17-24
Event History
Jun 28, 2023
Data Sourced
via Debian·08:06 AM
SeverityAffected Software
Jul 14, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
10:15 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38336?
CVE-2023-38336 is considered a high severity vulnerability due to its potential for command injection.
2
How do I fix CVE-2023-38336?
To fix CVE-2023-38336, update the rsh-client package to a version that has addressed the vulnerability.
3
What software is affected by CVE-2023-38336?
CVE-2023-38336 affects the rsh-client version 0.17-24 of the Netkit software.
4
What type of vulnerability is CVE-2023-38336?
CVE-2023-38336 is a command injection vulnerability that arises from improper handling of filenames.
5
Is CVE-2023-38336 related to other vulnerabilities?
Yes, CVE-2023-38336 is a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.