CVE-2019-7282
netkit-rsh: rcp access restriction bypass
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · November 19, 2021
Updated · November 22, 2025
Description
A vulnerability was found in rsh. The vulnerability occurs due to bypass restrictions via the filename of [.] or an empty filename. This flaw allows an attacker to modify the permissions of the target directory on the client-side.
Statement
Red Hat Enterprise Linux 6 and 7 were affected but Out of Support Scope. https://access.redhat.com/support/policy/updates/errata/
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-281 · Improper Preservation of Permissions