Cvs vulnerabilities

Products

• Cvs 18

Newest

• cvs Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12... CVE-2012-0804 Fix available 10.0 HighFebruary 9, 2012
• cvs cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to... CVE-2005-2693 Fix available 4.6 MediumAugust 25, 2005
• cvs CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers... CVE-2004-1342 Fix available 7.5 HighApril 27, 2005
• cvs Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. CVE-2005-0753 Fix available 7.5 HighApril 18, 2005
• cvs, freebsd, gentoo linux +3 more +5 more Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16... CVE-2004-1471 Public exploitFix available 7.1 HighDecember 31, 2004
• cvs CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current... CVE-2004-1343 Fix available 5.0 MediumDecember 31, 2004
• cvs, gentoo linux, openbsd +2 more +4 more serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle... CVE-2004-0418 Fix available 10.0 HighJune 11, 2004
• cvs, gentoo linux, openbsd +2 more +4 more Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x... CVE-2004-0417 Fix available 5.0 MediumJune 11, 2004
• cvs, gentoo linux, openbsd +2 more +4 more Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x... CVE-2004-0416 Public exploitFix available EPSS 13.2% 10.0 HighJune 11, 2004
• cvs, gentoo linux, openbsd +2 more +4 more CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry"... CVE-2004-0414 Fix available 10.0 HighJune 10, 2004
• cvs Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the... CVE-2004-0396 Public exploitFix available EPSS 67.5% 7.5 HighMay 19, 2004
• cvs CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in... CVE-2004-0405 Fix available 5.0 MediumApril 16, 2004
• cvs The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files... CVE-2004-0180 Fix available 2.6 LowApril 16, 2004
• cvs, slackware linux +1 more CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and... CVE-2003-0977 Fix available 7.5 HighDecember 10, 2003
• cvs, freebsd +1 more Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of... CVE-2003-0015 Public exploitFix available EPSS 23.9% 7.5 HighJanuary 21, 2003
• cvs CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers... CVE-2002-0092 5.0 MediumMarch 15, 2002
• cvs The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the... CVE-2000-0679 Public exploit 2.1 LowOctober 20, 2000
• cvs The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or... CVE-2000-0680 Public exploit 7.2 HighSeptember 21, 2000