Debian DSA-742-1 : cvs - buffer overflow

Derek Price, the current maintainer of CVS, discovered a buffer overflow in the CVS server, that serves the popular Concurrent Versions System, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 742-1] New cvs packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 742-1 [email protected] http://www.debian.org/security/ Martin Schulze July 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 742-1] New cvs packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 742-1 [email protected] http://www.debian.org/security/ Martin Schulze July 7th, 2005 http://www.debian.org/security/faq -...

CVE-2002-1681

Technical details beyond the basic XSS description are not provided in the connected documents. No additional specifics (affected versions, root cause, impact or fixes) are available here. Monitor for updates from official advisories.

Debian CVS "pserver" remote access authentication bypass vulnerability

Overview Debian Concurrent Versions System CVS remote repositories using "pserver" with the cvs-repouid Debian patch are vulnerable to authentication bypass. Description CVS is a version control and source code maintenance system that is widely used by open-source software development projects.Th...

USN-117-1: cvs vulnerability

Alen Zukich discovered a buffer overflow in the processing of version and author information in the CVS client. By tricking an user to connect to a malicious CVS server, an attacker could exploit this to execute arbitrary code with the privileges of the connecting user...

Debian DSA-715-1 : cvs - several vulnerabilities

Several problems have been discovered in the CVS server, which serves the popular Concurrent Versions System. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-1342 Maks Polunin and Alberto Garcia discovered independently that using the pserver access...

[SECURITY] [DSA 715-1] New cvs packages fix unauthorised repository access

-------------------------------------------------------------------------- Debian Security Advisory DSA 715-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 715-1] New cvs packages fix unauthorised repository access

-------------------------------------------------------------------------- Debian Security Advisory DSA 715-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1343

CVE-2004-1343 affects CVS 1.12 and earlier on Debian GNU/Linux; the issue occurs when cvs-repouids lacks a mapping for the current repository, allowing remote attackers to crash the CVS server (DoS). Debian security advisories DSA-715-1 describe fixes: for woody, CVS 1.11.1p1debian-10; for sid, C...

CVE-2004-1342

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

CVE-2004-1342

CVE-2004-1342 affects CVS on Debian GNU/Linux prior to the patches in DSA-715-1. When using the cvs-repouid patch with the pserver method, authentication can be bypassed, granting remote access to the repository. The Debian advisory fixes this in CVS versions 1.11.1p1debian-10 (stable woody) and ...

CVE-2004-1342

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

DSA-715-1 cvs - several

Bulletin has no description...

cvs security update

CentOS Errata and Security Advisory CESA-2005:387-06 An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow...

cvs security update

CentOS Errata and Security Advisory CESA-2005:387 An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow bug...

Moderate: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes security bugs is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes...

RHEL 4 : cvs (RHSA-2005:387)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:387 advisory. CVS Concurrent Version System is a version control system. A buffer overflow bug was found in the way the CVS client processes version and author...