CV
Product
Cvs
18
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Cvs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0804 | – | May 29 | Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly… Affected: 1.11; 1.12 |
| CVE-2005-2693 | – | Aug 26 | cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack Affected: 1.12.12 |
| CVE-2004-1342 | – | Apr 27 | CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method Affected: 1.10; 1.10.6; 1.10.7; 1.10.8; 1.11; 1.11.1; +12 more |
| CVE-2005-0753 | – | Apr 18 | Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code Affected: 1.10; 1.10.6; 1.10.7; 1.10.8; 1.11; 1.11.1; +11 more |
| CVE-2004-1343 | – | Dec 31 | CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers… Affected: 1.10; 1.10.6; 1.10.7; 1.10.8; 1.11; 1.11.1; +12 more |
| CVE-2004-1471 | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1_p1; 1.11.2; +14 more |
| CVE-2004-0416 | – | Aug 6 | Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1_p1; 1.11.2; +14 more |
| CVE-2004-0414 | – | Aug 6 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial… Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1_p1; 1.11.2; +14 more |
| CVE-2004-0417 | – | Aug 6 | Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a… Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1_p1; 1.11.2; +14 more |
| CVE-2004-0418 | – | Aug 6 | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds"… Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1_p1; 1.11.2; +14 more |
| CVE-2004-0396 | – | Jun 14 | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines Affected: 1.11; 1.12 |
| CVE-2004-0405 | – | Jun 1 | CVS before 1.11 allows CVS clients to read arbitrary files via Affected: through 1.10 |
| CVE-2004-0180 | – | Jun 1 | The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates,… Affected: through 1.10 |
| CVE-2003-0977 | – | Jan 5 | CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1_p1; 1.11.2; +4 more |
| CVE-2003-0015 | – | Feb 7 | Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as… Affected: 1.10.7; 1.10.8; 1.11; 1.11.1; 1.11.1p1; 1.11.2; +2 more |
| CVE-2002-0092 | – | Mar 15 | CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability Affected: through 1.10.8 |
| CVE-2000-0680 | – | Oct 20 | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan… Affected: 1.10.8 |
| CVE-2000-0679 | – | Oct 20 | The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files Affected: 1.10.8 |
Showing 18