CVE-2023-38336

Summary

CVE-2023-38336 is a new vulnerability affecting netkit-rcp in rsh-client version 0.17-24. This issue permits command injection through filenames due to the usage of /bin/sh by susystem. This vulnerability shares similarities with previous ones, CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778, which also involved command injection in netkit-rcp. Successful exploitation of this vulnerability can lead to unauthorized command execution and potential system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.