CV
Vendor
Cvs
18
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2012-0804 | CV Cvs Cvs | – | May 29 | Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly… |
| CVE-2005-2693 | CV Cvs Cvs | – | Aug 26 | cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack |
| CVE-2004-1342 | CV Cvs Cvs | – | Apr 27 | CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method |
| CVE-2005-0753 | CV Cvs Cvs | – | Apr 18 | Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code |
| CVE-2004-1343 | CV Cvs Cvs | – | Dec 31 | CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers… |
| CVE-2004-1471 | CV Cvs Cvs | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… |
| CVE-2004-0416 | CV Cvs Cvs | – | Aug 6 | Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code |
| CVE-2004-0414 | CV Cvs Cvs | – | Aug 6 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial… |
| CVE-2004-0417 | CV Cvs Cvs | – | Aug 6 | Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a… |
| CVE-2004-0418 | CV Cvs Cvs | – | Aug 6 | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds"… |
| CVE-2004-0396 | CV Cvs Cvs | – | Jun 14 | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines |
| CVE-2004-0405 | CV Cvs Cvs | – | Jun 1 | CVS before 1.11 allows CVS clients to read arbitrary files via |
| CVE-2004-0180 | CV Cvs Cvs | – | Jun 1 | The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates,… |
| CVE-2003-0977 | CV Cvs Cvs | – | Jan 5 | CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests |
| CVE-2003-0015 | CV Cvs Cvs | – | Feb 7 | Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as… |
| CVE-2002-0092 | CV Cvs Cvs | – | Mar 15 | CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability |
| CVE-2000-0680 | CV Cvs Cvs | – | Oct 20 | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan… |
| CVE-2000-0679 | CV Cvs Cvs | – | Oct 20 | The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files |