Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-0180HistoryJun 01, 2004 - 4:00 a.m.
CVE-2004-0180
2004-06-0104:00:00
Debian Security Bug Tracker
security-tracker.debian.org
12
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
84.5%
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 11 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 10 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 999 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
| Debian | 13 | all | cvs | < 1:1.12.5-4 | cvs_1:1.12.5-4_all.deb |
Related
nessus
nessus
FreeBSD : CVS path validation errors (0792e7a7-8e37-11d8-90d1-0020ed76ef5a)
2009-04-23 00:00:00
Slackware 8.1 / 9.0 / 9.1 / current : cvs security update (SSA:2004-108-02)
2005-07-13 00:00:00
RHEL 2.1 / 3 : cvs (RHSA-2004:153)
2004-07-06 00:00:00
ubuntucve
ubuntucve
CVE-2004-0180
2004-06-01 00:00:00
CVE-2004-0405
2004-06-01 00:00:00
cve
cve
CVE-2004-0405
2004-06-01 04:00:00
CVE-2004-0180
2004-06-01 04:00:00
freebsd
freebsd
CVS path validation errors
2004-04-14 00:00:00
slackware
slackware
cvs security update
2004-04-18 16:40:41
debiancve
debiancve
CVE-2004-0405
2004-06-01 04:00:00
osv
osv
cvs - several vulnerabilities
2004-04-16 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200404-13 (cvs)
2008-09-24 00:00:00
FreeBSD Ports: cvs+ipv6
2008-09-04 00:00:00
Debian Security Advisory DSA 486-1 (cvs)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2004-0405
2004-04-17 04:00:00
CVE-2004-0180
2004-04-16 04:00:00
nvd
nvd
CVE-2004-0180
2004-06-01 04:00:00
CVE-2004-0405
2004-06-01 04:00:00
gentoo
gentoo
CVS Server and Client Vulnerabilities
2004-04-14 00:00:00
redhat
redhat
(RHSA-2004:153) cvs security update
2004-04-14 00:00:00
debian
debian
[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities
2004-04-17 01:37:15
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:07.cvs
2004-04-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package cvs version 1.11.14-alt2
2004-04-07 00:00:00
suse
suse
remote code execution in cvs
2004-04-14 15:54:44
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.011 Low
EPSS
Percentile
84.5%
Related for DEBIANCVE:CVE-2004-0180