Unscored CVE-2002-0092 EUVD-2002-0092GHSA-6pfg-c738-q46f

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash)…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.

References

4234 vdb-entry
20020220 Help needed with bufferoverflow in cvs mailing-list
20020220 Re: [Fwd: Help needed with bufferoverflow in cvs] mailing-list
RHSA-2002:026 vendor-advisory
cvs-global-var-dos(8366) vdb-entry
DSA-117 vendor-advisory