The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade netkit-rsh | Nov 29, 2021 | Jan 31, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 31, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub