GLSA-200405-12 : CVS heap overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-12 CVS heap overflow vulnerability Stefan Esser discovered a heap overflow in the CVS server, which can be triggered by sending malicious 'Entry' lines and manipulating the flags related to that Entry. This vulnerability wa...

GLSA-200406-06 : CVS: additional DoS and arbitrary code execution vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200406-06 CVS: additional DoS and arbitrary code execution vulnerabilities A team audit of the CVS source code performed by Stefan Esser and Sebastian Krahmer resulted in the discovery of several remotely exploitable vulnerabiliti...

GLSA-200404-13 : CVS Server and Client Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200404-13 CVS Server and Client Vulnerabilities There are two vulnerabilities in CVS; one in the server and one in the client. The server vulnerability allows a malicious client to request the contents of any RCS file to which the...

CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval

Binary data 1219.prm...

CVS < 1.11.5 pserver Directory Request Double Free() Privilege Escalation

Binary data 1899.prm...

CVS Software Detection

Binary data 1179.prm...

CVS Server Detection

Binary data 1898.prm...

CVS < 1.11.16 / 1.12.8 pserver Line Entry Handling Remote Overflow

Binary data 1220.prm...

CVS history.c File Existence Information Disclosure

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behavior can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. C Tenable Network...

CVS < 1.11.10 / 1.12.3 pserver Crafted Module Request Arbitrary File / Directory Creation

Binary data 1180.prm...

[Full-Disclosure] iDEFENSE Security Advisory 08.16.04: CVS Undocumented Flag Information Disclosure Vulnerability

CVS Undocumented Flag Information Disclosure Vulnerability iDEFENSE Security Advisory 08.16.04 www.idefense.com/application/poi/display?id=130&type=vulnerabilities August 16, 2004 I. BACKGROUND CVS Concurrent Versions System is an open-source network-transparent version control system. II...

CVS information leak

By using undocumented -X key for 'cvs history' command it's possible to check existance of system files...

CVE-2004-0778

CVE-2004-0778 affects CVS: 1.11.x before 1.11.17 and 1.12.x before 1.12.9. The flaw enables remote attackers to determine the existence of arbitrary files/directories by abusing the -X option for an alternate history file, causing different error messages to be returned. The OpenVAS-derived entri...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVS history.c File Existence Disclosure

Binary data 2155.prm...

CVE-2004-0778: Observable Discrepancy

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVS "history" command may disclose sensitive information

Overview A vulnerability exists in the history command of Concurrent Versions System CVS. If exploited, this vulnerability could disclose sensitive information about files and directories on an affected system to a remote, authenticated CVS user. Description Concurrent Versions System CVS is a...

Remote CVS <= 1.11.15 (error_prog_name) Remote Exploit

Exploit for linux platform in category remote exploits ====================================================== Remote CVS = 1.11.15 errorprogname Remote Exploit ====================================================== Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan...

Remote CVS 1.11.15 - error_prog_name Arbitrary Code Execution

Remote CVS 1.11.15 - errorprogname Arbitrary Code Execution / Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan Chawdhary, [email protected] Vulnerability Description: The Vulnerability lies in the serveargumentx function. The Argumentx command parameter is used to...