{"id":"CVE-2003-0015","aliases":["DEBIAN-CVE-2003-0015","DSA-233","EUVD-2003-0015","GHSA-jj52-xc36-fq8r"],"status":"published","title":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of...","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.2387,"percentile":0.97841,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-415"],"published":"2003-01-21T00:00:00Z","modified":"2026-10-22T23:47:23Z","exploits":[{"source":"exploitdb","id":"EDB-22187","title":"CVS 1.11.x - Directory Request Double-Free Heap Corruption","type":"remote","platform":"linux","date":"2003-01-20","verified":true,"url":"https://www.exploit-db.com/exploits/22187"}],"fixes":[{"ecosystem":"Debian:12","package":"cvs","fixed_in":["1.11.2-5.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cvs","fixed_in":["1.11.2-5.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cvs","fixed_in":["1.11.2-5.1"],"sources":["osv"]},{"ecosystem":"Debian:3.0","package":"cvs","fixed_in":["1.11.1p1debian-8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.2-5.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.2-5.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.2-5.1"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1p1debian-8.1"}]}]}],"products":[{"vendor":"cvs","product":"cvs"},{"vendor":"freebsd","product":"freebsd"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2003-012.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://ccvs.cvshome.org/servlets/NewsItemView?newsID=51\u0026JServSessionIdservlets=5of2iuhr14","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=104342550612736\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:009","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=104438807203491\u0026w=2","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/6650","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11108","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=104333092200589\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2003-013.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://marc.info/?l=bugtraq\u0026m=104428571204468\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.debian.org/security/2003/dsa-233","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/650937","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://security.e-matters.de/advisories/012003.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.cert.org/advisories/CA-2003-02.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource","advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-032.shtml","tags":["third-party-advisory","government-resource","x_refsource_CIAC","x_transferred","web"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0015"},{"url":"https://github.com/advisories/GHSA-jj52-xc36-fq8r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2003-0015","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2003-0015","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T01:36:25.368Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-0015","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T01:36:25Z","updated_at":"2026-11-03T01:15:09.64087Z"}],"ghsa":[{"id":"GHSA-jj52-xc36-fq8r","title":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of...","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","status":"published","published":"2022-04-29T01:25:40Z","modified":"2023-01-30T05:00:46Z","cwes":["CWE-415"],"updated_at":"2026-11-02T14:46:16.34482Z"}],"nvd":[{"id":"CVE-2003-0015","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","status":"published","published":"2003-02-07T05:00:00Z","modified":"2026-06-16T22:01:20.433Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:00:46.710758Z"}],"osv":[{"id":"CVE-2003-0015","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","status":"published","published":"2003-02-07T05:00:00Z","modified":"2026-04-10T03:36:03.787021Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"DEBIAN-CVE-2003-0015","description":"Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.","status":"published","published":"2003-02-07T05:00:00Z","modified":"2026-10-22T23:47:23.363075499Z","updated_at":"2026-11-02T15:45:22.248131Z"},{"id":"DSA-233","title":"cvs - doubly freed memory","status":"published","published":"2003-01-21T00:00:00Z","modified":"2026-03-09T01:19:50.298093Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}