Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Ubuntu 18.04 LTS USN-5327-1 Critical: Rsh Permissions Modification Threat

ubuntu
Calendar Grey March 15, 2022
Dist Ubuntu Esm H88
CVE-2023-XXXX exposes Netkit-rsh flaws leading to unauthorized directory access. Perform system updates on Ubuntu 18.04 LTS for remediation specifics.
rsh would allow unintended modification of target directory permissions.

Summary

rsh would allow unintended modification of target directory permissions.

Software Description:

- netkit-rsh: client programs for remote shell connections

Details:

Hiroyuki Yamamori discovered that rsh incorrectly handled certain

filenames. If a user or automated system were tricked into connecting to a

malicious rsh server, a remote attacker could possibly use this issue to

modify directory permissions.

Topics%20covered

Topics Covered

security advisory threat ubuntu remote shell netkit-rsh permissions modification

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
rsh-client 0.17-17ubuntu0.1
rsh-server 0.17-17ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5327-1

CVE-2019-7282

Severity
critical
Lowest
Low
Medium
High
Critical

March 15, 2022

Topics%20covered

Topics Covered

security advisory threat ubuntu remote shell netkit-rsh permissions modification

Package Information

https://launchpad.net/ubuntu/+source/netkit-rsh/0.17-17ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.