CVE-2004-0405

2004-06-0104:00:00

Debian Security Bug Tracker

security-tracker.debian.org

0.011 Low

EPSS

Percentile

84.3%

JSON

CVS before 1.11 allows CVS clients to read arbitrary files via … (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.

OSVersionArchitecturePackageVersionFilename
Debian12allcvs< 1:1.12.5-4cvs_1:1.12.5-4_all.deb
Debian11allcvs< 1:1.12.5-4cvs_1:1.12.5-4_all.deb
Debian10allcvs< 1:1.12.5-4cvs_1:1.12.5-4_all.deb
Debian999allcvs< 1:1.12.5-4cvs_1:1.12.5-4_all.deb
Debian13allcvs< 1:1.12.5-4cvs_1:1.12.5-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cvs	< 1:1.12.5-4	cvs_1:1.12.5-4_all.deb
Debian	11	all	cvs	< 1:1.12.5-4	cvs_1:1.12.5-4_all.deb
Debian	10	all	cvs	< 1:1.12.5-4	cvs_1:1.12.5-4_all.deb
Debian	999	all	cvs	< 1:1.12.5-4	cvs_1:1.12.5-4_all.deb
Debian	13	all	cvs	< 1:1.12.5-4	cvs_1:1.12.5-4_all.deb