CVE-2019-7283

HIGH Year: 2019
CVSS v3 Score
7.4
High
CVSS v2 Score
5.8
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.

Related Vulnerabilities

CVE-2011-0029

HIGH
CVSS:7.4(High)

Untrusted search path vulnerability in the client in Microsoft Remote Desktop Connection 5.2, 6.0, 6.1, and 7.0 allows local users to gain privileges via a Trojan horse DLL in the current working dire...

NVD-CWE-Other2011

CVE-2015-1947

HIGH
CVSS:7.4(High)

Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan horse library that is ...

NVD-CWE-Other2015

CVE-2015-3272

HIGH
CVSS:7.4(High)

Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirec...

NVD-CWE-Other2015

CVE-2015-7393

HIGH
CVSS:7.4(High)

dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3...

NVD-CWE-Other2015

CVE-2015-7397

HIGH
CVSS:7.4(High)

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phis...

NVD-CWE-Other2015

CVE-2015-7428

HIGH
CVSS:7.4(High)

Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attack...

NVD-CWE-Other2015