AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-7283

HIGH · CVSS 7.4 EPSS 1.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-01-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-7283
Severity
HIGH
CVSS
7.4
EPSS
1.76%

Original NVD Description

An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.