904 matches found
CVE-2004-0418: Undefined Security Weakness
servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...
CVE-2004-0414: Undefined Security Weakness
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service crash, modification of critical program data, or arbitrary code execution...
CVE-2004-0417: Undefined Security Weakness
Integer overflow in the "Max-dotdot" CVS protocol command servemaxdotdot for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space...
[SECURITY] [DSA 517-1] New CVS packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 517-1 [email protected] http://www.debian.org/security/ Martin Schulze June 10th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 517-1] New CVS packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 517-1 [email protected] http://www.debian.org/security/ Martin Schulze June 10th, 2004 http://www.debian.org/security/faq -...
CVS: additional DoS and arbitrary code execution vulnerabilities
Background CVS Concurrent Versions System is an open-source network-transparent version control system. It contains both a client utility and a server. Description A team audit of the CVS source code performed by Stefan Esser and Sebastian Krahmer resulted in the discovery of several remotely...
DSA-517 cvs - buffer overflow
Bulletin has no description...
cvs
New cvs packages that have been upgraded to cvs-1.11.17 are available for Slackware 8.1, 9.0, 9.1, and -current to fix various security issues. Sites running a CVS server should upgrade to the new CVS package right away. More details about the issues may be found in the Common Vulnerabilities and...
Critical: Red Hat Security Advisory: cvs security update
An updated cvs package that fixes several server vulnerabilities, which could be exploited by a malicious client, is now available. CVS is a version control system frequently used to manage source code repositories. While investigating a previously fixed vulnerability, Derek Price discovered a fl...
Multiple CVS bugs
Buffer overflows, format strings, double free...
[Full-Disclosure] Advisory 09/2004: More CVS remote vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: More CVS remote vulnerabilities Release Date: 2004/06/09 Last Modified: 2004/06/09 Author: Stefan Esser [email protected] Application: CVS feature release = 1.12.8 CVS stable release...
CVS < 1.11.17 / 1.12.9 Multiple Vulnerabilities
The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system because of a flaw relating to malformed Entry lines which lead to a missing NULL terminator. Among the issues deemed likely to be exploitable were: - A double-free...
Security fix for the ALT Linux 5 package cvs version 1.11.15-alt4
June 8, 2004 Dmitry V. Levin 1.11.15-alt4 - Applied upstream security fixes to CAN-2004-0414, CAN-2004-0416, CAN-2004-0417, CAN-2004-0418, and to some minor bugs which didn't appear to deserve CVE names. Thanks to Stefan Esser, Sebastian Krahmer, and Derek Robert Price for finding and fixing thes...
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
CVE-2004-0405
CVS before 1.11 allows CVS clients to read arbitrary files via .. dot dot sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180...
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...
CVE-2004-0405
CVS before 1.11 allows CVS clients to read arbitrary files via .. dot dot sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180...