CVE-2023-38336

Опубликовано: 14 июл. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.

Ссылки

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039689
Exploit
Issue Tracking
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039689
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netkit:netkit:0.17-24:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00951

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVE-2023-38336

CVSS3: 9.8

ubuntu

больше 2 лет назад

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.

CVE-2023-38336

CVSS3: 9.8

debian

больше 2 лет назад

netkit-rcp in rsh-client 0.17-24 allows command injection via filename ...

GHSA-vg2g-72mx-mj33

CVSS3: 9.8

github

больше 2 лет назад

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.

EPSS

Процентиль: 76%

0.00951

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77