https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 04 Jun 2026 04:07:06 +0000 https://vulnerability.circl.lu/sighting/d5b2995a-9624-4b97-9d8a-2aa381a4a43e/export {"uuid": "d5b2995a-9624-4b97-9d8a-2aa381a4a43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7283", "type": "seen", "source": "https://t.me/cibsecurity/22961", "content": "\u203c CVE-2019-25017 \u203c\n\nAn issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious rcp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rcp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). This issue is similar to CVE-2019-6111 and CVE-2019-7283. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-02T20:33:53.000000Z"} {"uuid": "d5b2995a-9624-4b97-9d8a-2aa381a4a43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7283", "type": "seen", "source": "https://t.me/cibsecurity/22961", "content": "\u203c CVE-2019-25017 \u203c\n\nAn issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious rcp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rcp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). This issue is similar to CVE-2019-6111 and CVE-2019-7283. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-02T20:33:53.000000Z"} https://vulnerability.circl.lu/sighting/d5b2995a-9624-4b97-9d8a-2aa381a4a43e/export Tue, 02 Feb 2021 20:33:53 +0000 https://vulnerability.circl.lu/sighting/30d00d40-0c38-403e-b0dc-8e20ea575654/export {"uuid": "30d00d40-0c38-403e-b0dc-8e20ea575654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7283", "type": "seen", "source": "https://t.me/VulnerabilityNews/20049", "content": "An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious rcp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rcp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). This issue is similar to CVE-2019-6111 and CVE-2019-7283. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.\nPublished at: February 02, 2021 at 07:15PM\nView on website", "creation_timestamp": "2021-02-02T20:46:12.000000Z"} {"uuid": "30d00d40-0c38-403e-b0dc-8e20ea575654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7283", "type": "seen", "source": "https://t.me/VulnerabilityNews/20049", "content": "An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious rcp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rcp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). This issue is similar to CVE-2019-6111 and CVE-2019-7283. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.\nPublished at: February 02, 2021 at 07:15PM\nView on website", "creation_timestamp": "2021-02-02T20:46:12.000000Z"} https://vulnerability.circl.lu/sighting/30d00d40-0c38-403e-b0dc-8e20ea575654/export Tue, 02 Feb 2021 20:46:12 +0000 https://vulnerability.circl.lu/sighting/cc7941ff-fdd8-47a0-8950-5d391cfde3d0/export {"uuid": "cc7941ff-fdd8-47a0-8950-5d391cfde3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7283", "type": "seen", "source": "https://t.me/cibsecurity/66768", "content": "\u203c CVE-2023-38336 \u203c\n\nnetkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-15T02:22:46.000000Z"} {"uuid": "cc7941ff-fdd8-47a0-8950-5d391cfde3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7283", "type": "seen", "source": "https://t.me/cibsecurity/66768", "content": "\u203c CVE-2023-38336 \u203c\n\nnetkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-15T02:22:46.000000Z"} https://vulnerability.circl.lu/sighting/cc7941ff-fdd8-47a0-8950-5d391cfde3d0/export Sat, 15 Jul 2023 02:22:46 +0000