Netkit

This hub aggregates every CVE we track for Netkit, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Netkit.

• CVE-2023-38336netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.9.8Jul 14, 2023
• CVE-2019-7283An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validat...7.4Jan 31, 2019
• CVE-2019-7282In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions ...5.9Jan 31, 2019
• CVE-2006-6008ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteuid, setgid, and setuid calls, which might allow remote authenticated users to g...6.5Nov 21, 2006
• CVE-2004-0911telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability th...5.0Sep 28, 2004
• CVE-1999-0048Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges.10.0Sep 29, 1999