CVE-2019-7283

An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.

• https://bugs.debian.org/920486Exploit, Issue Tracking, Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/11/msg00016.htmlMailing List, Third Party Advisory
• https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txtMitigation, Not Applicable, Third Party Advisory
• https://bugs.debian.org/920486Exploit, Issue Tracking, Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/11/msg00016.htmlMailing List, Third Party Advisory
• https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txtMitigation, Not Applicable, Third Party Advisory

Published

Jan 31, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7277Optergy Proton/Enterprise devices allow Unauthenticated Inte…
• CVE-2019-7278Optergy Proton/Enterprise devices have an Unauthenticated SM…
• CVE-2019-7279Optergy Proton/Enterprise devices have Hard-coded Credential…
• CVE-2019-7280Prima Systems FlexAir, Versions 2.3.38 and prior. The sessio…8.8
• CVE-2019-7281Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthe…8.8
• CVE-2019-7282In NetKit through 0.17, rcp.c in the rcp client allows remot…5.9
• CVE-2019-7284This issue was addressed with improved checks. This issue is…4.3
• CVE-2019-7285A use after free issue was addressed with improved memory ma…8.8
• CVE-2019-7286A memory corruption issue was addressed with improved input …7.8
• CVE-2019-7287A memory corruption issue was addressed with improved input …7.8
• CVE-2019-7288The issue was addressed with improved validation on the Face…9.8
• CVE-2019-7289A parsing issue in the handling of directory paths was addre…5.5