904 matches found
Slackware 8.1 / 9.0 / 9.1 / current : cvs (SSA:2004-161-01)
New cvs packages that have been upgraded to cvs-1.11.17 are available for Slackware 8.1, 9.0, 9.1, and -current to fix various security issues. Sites running a CVS server should upgrade to the new CVS package right away. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
Slackware 8.1 / 9.0 / 9.1 / current : cvs security update (SSA:2004-108-02)
CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory affects both uses of CVS. A security problem which could allow a server to create arbitrary files on a client machine, and...
Slackware 10.0 / 10.1 / 8.1 / 9.0 / 9.1 / current : CVS (SSA:2005-111-01)
New CVS packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2005-111-01. The text itself is...
SSA-18708 New CVS packages available
New cvs packages are available to fix a security vulnerability. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated and is no longer used after a revamping of the Slackware generator. Disabled on 2011/05/27. This script was automatically generated from a Slackware Security Advisory ...
Slackware 8.1 / 9.0 / 9.1 / current : cvs (SSA:2004-140-01)
New cvs packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a buffer overflow vulnerability which could allow an attacker to run arbitrary programs on the CVS server. Sites running a CVS server should upgrade to the new CVS package right away. %NASLMINLEVEL 70300 C Tenable...
Slackware 8.1 / 9.0 / 9.1 / current : cvs security update (SSA:2003-345-01)
CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory deals with the use of CVS as a server. A security problem which could allow an attacker to create directories and possibly...
DSA-742-1 cvs - buffer overflow
Bulletin has no description...
Debian DSA-742-1 : cvs - buffer overflow
Derek Price, the current maintainer of CVS, discovered a buffer overflow in the CVS server, that serves the popular Concurrent Versions System, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
[SECURITY] [DSA 742-1] New cvs packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 742-1 [email protected] http://www.debian.org/security/ Martin Schulze July 7th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 742-1] New cvs packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 742-1 [email protected] http://www.debian.org/security/ Martin Schulze July 7th, 2005 http://www.debian.org/security/faq -...
CVE-2002-1681
Technical details beyond the basic XSS description are not provided in the connected documents. No additional specifics (affected versions, root cause, impact or fixes) are available here. Monitor for updates from official advisories.
Debian CVS "pserver" remote access authentication bypass vulnerability
Overview Debian Concurrent Versions System CVS remote repositories using "pserver" with the cvs-repouid Debian patch are vulnerable to authentication bypass. Description CVS is a version control and source code maintenance system that is widely used by open-source software development projects.Th...
USN-117-1: cvs vulnerability
Alen Zukich discovered a buffer overflow in the processing of version and author information in the CVS client. By tricking an user to connect to a malicious CVS server, an attacker could exploit this to execute arbitrary code with the privileges of the connecting user...
Debian DSA-715-1 : cvs - several vulnerabilities
Several problems have been discovered in the CVS server, which serves the popular Concurrent Versions System. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-1342 Maks Polunin and Alberto Garcia discovered independently that using the pserver access...
[SECURITY] [DSA 715-1] New cvs packages fix unauthorised repository access
-------------------------------------------------------------------------- Debian Security Advisory DSA 715-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 715-1] New cvs packages fix unauthorised repository access
-------------------------------------------------------------------------- Debian Security Advisory DSA 715-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...
CVE-2004-1342
CVE-2004-1342 affects CVS on Debian GNU/Linux prior to the patches in DSA-715-1. When using the cvs-repouid patch with the pserver method, authentication can be bypassed, granting remote access to the repository. The Debian advisory fixes this in CVS versions 1.11.1p1debian-10 (stable woody) and ...
CVE-2004-1343
CVE-2004-1343 affects CVS 1.12 and earlier on Debian GNU/Linux; the issue occurs when cvs-repouids lacks a mapping for the current repository, allowing remote attackers to crash the CVS server (DoS). Debian security advisories DSA-715-1 describe fixes: for woody, CVS 1.11.1p1debian-10; for sid, C...
CVE-2004-1343
CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...
