CVE-2019-7283
netkit-rsh: possible overwrite of arbitrary files by a malicious rsh server
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 31, 2019
Updated · November 22, 2025
Description
A vulnerability was found in rsh. The vulnerability occurs due to a possible overwrite of arbitrary files by a malicious rsh server. This flaw allows an attacker or a malicious rsh server (or a Man-in-The-Middle attacker) to overwrite arbitrary files in a directory on the rcp client machine.
Statement
Red Hat Enterprise Linux 6 and 7 were affected but Out of Support Scope. https://access.redhat.com/support/policy/updates/errata/
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CWE not specified