CVE-2003-0015
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of...
CVE-2003-0015 is a high vulnerability (CVSS 7.5) in Cvs, published January 21, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 23.9%, the 97th percentile. Fixed in cvs 1.11.2-5.1.
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Exploit likelihood
What each source reports
NVD Score used
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Record
CVE-2003-0015- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-415
- Updated
- 2026-11-02
CVE List No score
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Record
CVE-2003-0015- Updated
- 2026-11-02
EUVDEUVD-2003-0015 No score
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Record
EUVD-2003-0015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jj52-xc36-fq8r No score
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of...
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Record
GHSA-jj52-xc36-fq8r- Weakness
- CWE-415
- Updated
- 2026-11-02
OSV No score
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Record
CVE-2003-0015- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0015 No score
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Record
DEBIAN-CVE-2003-0015- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | CVS 1.11.x - Directory Request Double-Free Heap Corruption | 2003-01-20 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
redhat.com/support/errata/RHSA-2003-012.html
ccvs.cvshome.org/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14
marc.info?l=bugtraq&m=104342550612736&w=2
mandrakesoft.com/security/advisories?name=MDKSA-2003:009
securityfocus.com/bid/6650
Show 13 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/11108
rhn.redhat.com/errata/RHSA-2003-013.html
debian.org/security/2003/dsa-233
kb.cert.org/vuls/id/650937
security.e-matters.de/advisories/012003.html
cert.org/advisories/CA-2003-02.html
ciac.org/ciac/bulletins/n-032.shtml
archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.html
nvd.nist.gov/vuln/detail/CVE-2003-0015
github.com/advisories/GHSA-jj52-xc36-fq8r
security-tracker.debian.org/tracker/CVE-2003-0015