CVE-2004-0778
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the...
CVE-2004-0778 is a medium vulnerability (CVSS 5.0) in Gnu Cvs, published August 18, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. Fixed in cvs 1:1.12.9.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.40%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:1.12.9cvs +10 more
Description
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cvsDebian:12 | before 1:1.12.9 | 1:1.12.9 |
cvsDebian:13 | before 1:1.12.9 | 1:1.12.9 |
cvsDebian:14 | before 1:1.12.9 | 1:1.12.9 |
cvsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvs-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvs-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvs-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
cvs-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.11.2-24 | 0:1.11.2-24 |
What each source reports
NVD Score used
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
- Record
CVE-2004-0778- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-203
- Updated
- 2026-11-02
CVE ListNo score
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
- Record
CVE-2004-0778- Updated
- 2026-11-02
EUVDEUVD-2004-0776No score
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
- Record
EUVD-2004-0776- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vq86-43rv-wrv5No score
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the...
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
- Record
GHSA-vq86-43rv-wrv5- Weakness
- CWE-203
- Updated
- 2026-11-02
OSVNo score
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
- Record
CVE-2004-0778- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0778No score
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
- Record
DEBIAN-CVE-2004-0778- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/10955
mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:108
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10688
idefense.com/application/poi/display?id=130&type=vulnerabilities
exchange.xforce.ibmcloud.com/vulnerabilities/17001
kb.cert.org/vuls/id/579225
Show 25 moreShow less
nvd.nist.gov/vuln/detail/CVE-2004-0778
github.com/advisories/GHSA-vq86-43rv-wrv5
security-tracker.debian.org/tracker/CVE-2004-0778
access.redhat.com/errata/RHSA-2004:233
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_233.json
bugzilla.redhat.com/show_bug.cgi?id=1617197
cve.org/CVERecord?id=CVE-2004-0414