cvs vulnerabilities (Debian)

19 vulnerabilities.

• cvs Debian CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to... CVE-2017-12836 Fix available 7.5 HighAugust 13, 2017
• cvs Debian Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12... CVE-2012-0804 Fix available 10.0 HighFebruary 9, 2012
• cvs Debian cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to... CVE-2005-2693 Fix available 4.6 MediumAugust 25, 2005
• cvs Debian CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers... CVE-2004-1342 Fix available 7.5 HighApril 27, 2005
• cvs Debian Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. CVE-2005-0753 Fix available 7.5 HighApril 18, 2005
• cvs Debian Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16... CVE-2004-1471 Public exploitFix available 7.1 HighDecember 31, 2004
• cvs Debian CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current... CVE-2004-1343 Fix available 5.0 MediumDecember 31, 2004
• cvs Debian CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the... CVE-2004-0778 Fix available 5.0 MediumAugust 18, 2004
• cvs Debian serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle... CVE-2004-0418 Fix available 10.0 HighJune 11, 2004
• cvs Debian Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x... CVE-2004-0417 Fix available 5.0 MediumJune 11, 2004
• cvs Debian Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x... CVE-2004-0416 Public exploitFix available EPSS 13.2% 10.0 HighJune 11, 2004
• cvs Debian CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry"... CVE-2004-0414 Fix available 10.0 HighJune 10, 2004
• cvs Debian Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the... CVE-2004-0396 Public exploitFix available EPSS 67.5% 7.5 HighMay 19, 2004
• cvs Debian CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in... CVE-2004-0405 Fix available 5.0 MediumApril 16, 2004
• cvs Debian The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files... CVE-2004-0180 Fix available 2.6 LowApril 16, 2004
• cvs Debian cvs - remote vulnerability DSA-422 Fix available No scoreJanuary 13, 2004
• cvs Debian CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and... CVE-2003-0977 Fix available 7.5 HighDecember 10, 2003
• cvs Debian Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of... CVE-2003-0015 Public exploitFix available EPSS 23.9% 7.5 HighJanuary 21, 2003
• cvs Debian Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local... CVE-2002-0844 Fix available 7.8 HighAugust 12, 2002