CVS Software Detection

Binary data 1179.prm...

CVS Server Detection

Binary data 1898.prm...

CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval

Binary data 1219.prm...

CVS < 1.11.5 pserver Directory Request Double Free() Privilege Escalation

Binary data 1899.prm...

CVS < 1.11.16 / 1.12.8 pserver Line Entry Handling Remote Overflow

Binary data 1220.prm...

CVS < 1.11.10 / 1.12.3 pserver Crafted Module Request Arbitrary File / Directory Creation

Binary data 1180.prm...

CVS history.c File Existence Information Disclosure

The remote CVS server, according to its version number, can be exploited by malicious users to gain knowledge of certain system information. This behavior can be exploited to determine the existence and permissions of arbitrary files and directories on a vulnerable system. C Tenable Network...

CVS information leak

By using undocumented -X key for 'cvs history' command it's possible to check existance of system files...

[Full-Disclosure] iDEFENSE Security Advisory 08.16.04: CVS Undocumented Flag Information Disclosure Vulnerability

CVS Undocumented Flag Information Disclosure Vulnerability iDEFENSE Security Advisory 08.16.04 www.idefense.com/application/poi/display?id=130&type=vulnerabilities August 16, 2004 I. BACKGROUND CVS Concurrent Versions System is an open-source network-transparent version control system. II...

CVE-2004-0778

CVE-2004-0778 affects CVS: 1.11.x before 1.11.17 and 1.12.x before 1.12.9. The flaw enables remote attackers to determine the existence of arbitrary files/directories by abusing the -X option for an alternate history file, causing different error messages to be returned. The OpenVAS-derived entri...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVS history.c File Existence Disclosure

Binary data 2155.prm...

CVE-2004-0778: Observable Discrepancy

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVS "history" command may disclose sensitive information

Overview A vulnerability exists in the history command of Concurrent Versions System CVS. If exploited, this vulnerability could disclose sensitive information about files and directories on an affected system to a remote, authenticated CVS user. Description Concurrent Versions System CVS is a...

Remote CVS <= 1.11.15 (error_prog_name) Remote Exploit

Exploit for linux platform in category remote exploits ====================================================== Remote CVS = 1.11.15 errorprogname Remote Exploit ====================================================== Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan...

Remote CVS 1.11.15 - error_prog_name Arbitrary Code Execution

Remote CVS 1.11.15 - errorprogname Arbitrary Code Execution / Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan Chawdhary, [email protected] Vulnerability Description: The Vulnerability lies in the serveargumentx function. The Argumentx command parameter is used to...

Remote CVS 1.11.15 - 'error_prog_name' Arbitrary Code Execution

/ Remote CVS = 1.11.15 exploit for the errorprogname double free vuln. by Gyan Chawdhary, [email protected] Vulnerability Description: The Vulnerability lies in the serveargumentx function. The Argumentx command parameter is used to append data to a previously supplied Argument command. These...

CVE-2004-0414

CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service crash, modification of critical program data, or arbitrary code execution...

CVE-2004-0414

CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service crash, modification of critical program data, or arbitrary code execution...