{"action":"Upgrade netkit-rsh to 0.17-20 or later.","affected":[{"fixed":"0.17-20","introduced":"0"}],"component":"netkit-rsh","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.17-20"],"id":"tcs_01M5NE9S7TR21SFVAJ1BNCDNWS","modified_at":"2026-09-21T07:03:23.463693845Z","published_at":"2019-01-31T18:29:00.977Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-7283","https://security-tracker.debian.org/tracker/CVE-2019-7283"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-7283","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-7283"}],"summary":"An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation"}