Every CVE Search/ Get API key

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the...

5.0 MediumFix available

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Exploit likelihood

2.40%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Record
CVE-2004-0778
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-203
Updated
2026-11-02
CVE List No score

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Record
CVE-2004-0778
Updated
2026-11-02
EUVDEUVD-2004-0776 No score

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Record
EUVD-2004-0776
Updated
2026-11-03
GitHub AdvisoriesGHSA-vq86-43rv-wrv5 No score

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the...

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Record
GHSA-vq86-43rv-wrv5
Weakness
CWE-203
Updated
2026-11-02
OSV No score

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Record
CVE-2004-0778
Updated
2026-11-02
OSVDEBIAN-CVE-2004-0778 No score

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

Record
DEBIAN-CVE-2004-0778
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cvs
Debian:12
 before 1:1.12.9
1:1.12.9
cvs
Debian:13
 before 1:1.12.9
1:1.12.9
cvs
Debian:14
 before 1:1.12.9
1:1.12.9
cvs
Red Hat:enterprise_linux:3::as
 before 0:1.11.2-24
0:1.11.2-24
cvs-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.11.2-24
0:1.11.2-24
cvs
Red Hat:enterprise_linux:3::desktop
 before 0:1.11.2-24
0:1.11.2-24
cvs-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.11.2-24
0:1.11.2-24
cvs
Red Hat:enterprise_linux:3::es
 before 0:1.11.2-24
0:1.11.2-24
cvs-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.11.2-24
0:1.11.2-24
cvs
Red Hat:enterprise_linux:3::ws
 before 0:1.11.2-24
0:1.11.2-24
cvs-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.11.2-24
0:1.11.2-24

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0778 is a medium vulnerability (CVSS 5.0) in Gnu Cvs, published August 18, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. Fixed in cvs 1:1.12.9.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open