Unscored DSA-486 2 CVEs

cvs - several vulnerabilities

Published Apr 16, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	cvs	1.11.1p1debian-9woody2

Vulnerabilities 2

Unscored —

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff fi…

cvs Debian

Apr 16, 2004
Unscored —

CVE-2004-0405

CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client reque…

cvs Debian

Apr 17, 2004