cvs pserver remote heap buffer overflow

Due to a programming error in code used to parse data
received from the client, malformed data can cause a heap
buffer to overflow, allowing the client to overwrite
arbitrary portions of the server’s memory.
A malicious CVS client can exploit this to run arbitrary
code on the server at the privilege level of the CVS server
software.