Skip to content
OpenAdvisories
Unscored RHSA-2004:004 2 CVEs

Red Hat Security Advisory: cvs security update

Published Sep 12, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as cvs 0:1.11.2-14
Red Hat · RHEL 3 enterprise_linux:3::desktop cvs 0:1.11.2-14
Red Hat · RHEL 3 enterprise_linux:3::es cvs 0:1.11.2-14
Red Hat · RHEL 3 enterprise_linux:3::ws cvs 0:1.11.2-14

Vulnerabilities 2

  • Unscored —
    CVE-2002-0844

    Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitr…

    cvs Debian
  • Unscored —
    CVE-2003-0977

    CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file syste…

    cvs Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84
  • article
    http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_004.json
  • report
    https://access.redhat.com/security/cve/CVE-2002-0844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1616825
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2002-0844
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2002-0844
  • report
    https://access.redhat.com/security/cve/CVE-2003-0977
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2003-0977
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2003-0977