Netkit

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Netkit records in CISA KEV

No Netkit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netkit 4 records HIGH Linux Netkit 3 records HIGH

Records

4 records in Netkit · all components

TI-2023-19733 CVE-2023-38336 · GHSA-vg2g-72mx-mj33

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh…

HIGH 82

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02062 Published 2023-07-14 No fix listed CWE-77

TI-2019-05173 CVE-2019-7283 · GHSA-2jpr-cg8h-wpp2

An issue was discovered in rcp in NetKit through 0.17.

LOW 36

An issue was discovered in rcp in NetKit through 0.17.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01762 Published 2019-01-31 Will not fix

TI-2006-05776 CVE-2006-6008 · GHSA-hwph-788h-xp87

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the…

LOW 33

ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to gain privileges if these…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02061 Published 2006-11-21 No fix listed

TI-2019-05172 CVE-2019-7282 · GHSA-xrxr-vcvh-gm7h

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass…

LOW 31

In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of .

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02067 Published 2019-01-31 Will not fix

Open these records in search →

Critical	3
High	1
Medium	3
Low	0
No CVSS	0