CVE-2005-0753

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

7.5 HighFix available

CVE-2005-0753 is a high vulnerability (CVSS 7.5) in Cvs, published April 18, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.75%, the 91st percentile. Fixed in cvs 1:1.12.9-13.

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Exploit likelihood

4.75%Down 3.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Record: CVE-2005-0753
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Record: CVE-2005-0753
Updated: 2026-11-02

EUVDEUVD-2005-0754 No score

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Record: EUVD-2005-0754
Updated: 2026-11-03

GitHub AdvisoriesGHSA-m73f-6chm-3m86 No score

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Record: GHSA-m73f-6chm-3m86
Updated: 2026-11-02

OSV No score

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Record: CVE-2005-0753
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-0753 No score

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Record: DEBIAN-CVE-2005-0753
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`cvs` Debian:12	before 1:1.12.9-13	1:1.12.9-13
`cvs` Debian:13	before 1:1.12.9-13	1:1.12.9-13
`cvs` Debian:14	before 1:1.12.9-13	1:1.12.9-13
`cvs` Debian:3.0	before 1.11.1p1debian-12, plus listed versions 1.11.1p1debian-101.11.1p1debian-111.11.1p1debian-9woody7	1.11.1p1debian-12
`cvs` Red Hat:enterprise_linux:3::as	before 0:1.11.2-27	0:1.11.2-27
`cvs-debuginfo` Red Hat:enterprise_linux:3::as	before 0:1.11.2-27	0:1.11.2-27
`cvs` Red Hat:enterprise_linux:3::desktop	before 0:1.11.2-27	0:1.11.2-27
`cvs-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:1.11.2-27	0:1.11.2-27
`cvs` Red Hat:enterprise_linux:3::es	before 0:1.11.2-27	0:1.11.2-27
`cvs-debuginfo` Red Hat:enterprise_linux:3::es	before 0:1.11.2-27	0:1.11.2-27

Show 10 moreShow less

Affected packages
Package	Affected	Fixed
`cvs` Red Hat:enterprise_linux:3::ws	before 0:1.11.2-27	0:1.11.2-27
`cvs-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:1.11.2-27	0:1.11.2-27
`cvs` Red Hat:enterprise_linux:4::as	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs-debuginfo` Red Hat:enterprise_linux:4::as	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs` Red Hat:enterprise_linux:4::desktop	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs` Red Hat:enterprise_linux:4::es	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs-debuginfo` Red Hat:enterprise_linux:4::es	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs` Red Hat:enterprise_linux:4::ws	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4
`cvs-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:1.11.17-7.RHEL4	0:1.11.17-7.RHEL4

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 12 moreShow less