cvs

18 results · Feed

• Unscored —
  CVE-2017-12836

  CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code …

  cvs cvs cvs Debian Ubuntu Alpine
  Aug 24, 2017
• Unscored —
  CVE-2012-0804

  Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy …

  cvs cvs Debian Alpine
  May 29, 2012
• Unscored —
  CVE-2005-2693

  cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary f…

  cvs Debian
  Aug 25, 2005
• Unscored —
  CVE-2004-1343

  CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not ex…

  cvs Debian
  Apr 27, 2005
• Unscored —
  CVE-2004-1342

  CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authenticatio…

  cvs Debian
  Apr 27, 2005
• Unscored —
  CVE-2005-0753

  Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

  cvs Debian
  Apr 21, 2005
• Unscored —
  CVE-2004-1471 Public exploit

  Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attacke…

  cvs Debian
  Feb 13, 2005
• Unscored —
  CVE-2002-0844

  Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitr…

  cvs Debian
  Sep 1, 2004
• Unscored —
  CVE-2003-0015 Public exploit EPSS 24%

  Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly e…

  cvs Debian
  Sep 1, 2004
• Unscored —
  CVE-2004-0778

  CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary fi…

  cvs Debian
  Aug 18, 2004
• Unscored —
  CVE-2004-0417

  Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x …

  cvs Debian
  Jun 11, 2004
• Unscored —
  CVE-2004-0414

  CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents…

  cvs Debian
  Jun 11, 2004
• Unscored —
  CVE-2004-0416 Public exploit EPSS 13%

  Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may …

  cvs Debian
  Jun 11, 2004
• Unscored —
  CVE-2004-0418

  serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which…

  cvs Debian
  Jun 11, 2004
• Unscored —
  CVE-2004-0396 Public exploit EPSS 68%

  Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allow…

  cvs Debian
  May 20, 2004
• Unscored —
  CVE-2004-0405

  CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client reque…

  cvs Debian
  Apr 17, 2004
• Unscored —
  CVE-2004-0180

  The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff fi…

  cvs Debian
  Apr 16, 2004
• Unscored —
  CVE-2003-0977

  CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file syste…

  cvs Debian
  Dec 10, 2003