CVE-2016-1000003

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

CVE-2016-1000003: Improper Control of Generation of Code

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

ZOHO ManageEngine Desktop Central MSP 'AndroidCheckInServlet' Servlet Remote Code Execution Vulnerability

ZOHO ManageEngine Desktop Central MSP is a desktop and mobile device management software for MSPs. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks and provide differentiated management services for organizations of all sizes. A securit...

CVE-2003-0015: Double Free

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands...

Mandrake Linux Security Advisory : cvs (MDKSA-2003:009)

Two vulnerabilities were discoverd by Stefen Esser in the cvs program. The first is an exploitable double free bug within the server, which can be used to execute arbitrary code on the CVS server. To accomplish this, the attacker must have an anonymous read-only login to the CVS server. The secon...

DEBIAN-CVE-2003-0015

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands...

cvs-1.10.8.txt

I found two security problems in cvs-1.10.8. 1 A committer can execute any binary in server using CVS/Checkin.prog or CVS/Update.prog. A committer can execute arbitrary binary on a cvs server using Checkin.prog. Usually CVS/Checkin.prog in a working directory is copied from CVSROOT/modules when t...