Fedora Core 2 : cvs-1.11.17-2 (2004-170)

While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...

Fedora Core 1 : cvs-1.11.15-1 (2004-110)

The client for CVS before 1.11.15 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates. Updated packages were made available in April 2004 however the original update notification email did not make it ...

Fedora Core 1 : cvs-1.11.15-5 (2004-126)

Stefan Esser discovered a flaw in cvs where malformed 'Entry' lines could cause a heap overflow. An attacker who has access to a CVS server could use this flaw to execute arbitrary code under the UID which the CVS server is executing. The Common Vulnerabilities and Exposures project cve.mitre.org...

Fedora Core 1 : cvs-1.11.17-1 (2004-169)

While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-0414 to this issue. Stefan Esser and...

Fedora Core 2 : cvs-1.11.15-6 (2004-131)

Stefan Esser discovered a flaw in cvs where malformed 'Entry' lines could cause a heap overflow. An attacker who has access to a CVS server could use this flaw to execute arbitrary code under the UID which the CVS server is executing. The Common Vulnerabilities and Exposures project cve.mitre.org...

FreeBSD : CVS path validation errors (32)

The following package needs to be updated: cvs+ipv6 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg0792e7a78e3711d890d10020ed76ef5a.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 / 3 : cvs (RHSA-2004:004)

Updated cvs packages closing a vulnerability that could allow cvs to attempt to create files and directories in the root file system are now available. CVS is a version control system frequently used to manage source code repositories. A flaw was found in versions of CVS prior to 1.11.10 where a...

RHEL 2.1 / 3 : cvs (RHSA-2004:233)

An updated cvs package that fixes several server vulnerabilities, which could be exploited by a malicious client, is now available. CVS is a version control system frequently used to manage source code repositories. While investigating a previously fixed vulnerability, Derek Price discovered a fl...

RHEL 2.1 : cvs (RHSA-2003:013)

Updated CVS packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability which would permit arbitrary command execution on servers configured to allow anonymous read-only access. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 CVS is a...

RHEL 2.1 / 3 : cvs (RHSA-2004:190)

An updated cvs package that fixes a server vulnerability that could be exploited by a malicious client is now available. CVS is a version control system frequently used to manage source code repositories. Stefan Esser discovered a flaw in cvs where malformed 'Entry' lines could cause a heap...

FreeBSD : SA-04:10.cvs

The remote host is running a version of FreeBSD which contains a heap overflow in the cvs pserver code. This flaw may be used by an attacker to execute arbitrary code on the remote host, provided that it's running a cvs pserver. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVS Remote Entry Line Heap Overflow Root Exploit (Linux/FreeBSD)

Exploit for multiple platform in category remote exploits ================================================================ CVS Remote Entry Line Heap Overflow Root Exploit Linux/FreeBSD ================================================================ include include include include include includ...

CVS Remote Entry Line Root Heap Overflow Exploit

Exploit for solaris platform in category remote exploits ================================================ CVS Remote Entry Line Root Heap Overflow Exploit ================================================ include include include include include include include include include include include inclu...

CVS (LinuxFreeBSD) - Remote Entry Line Heap Overflow

CVS LinuxFreeBSD - Remote Entry Line Heap Overflow include include include include include include include include include include include include include include typedef unsigned char uchar; void progressvoid; int brutecvsrootvoid; int bruteusernamevoid; int brutepasswordvoid; void hdlcrashedint...

CVS - Remote Entry Line Root Heap Overflow

CVS - Remote Entry Line Root Heap Overflow include include include include include include include include include include include include include include define CVSPORT 2401 define RET 0xffbffd20 define NOP 0x82102017 define ROUNDs if s % wordsize s += wordsize - s % wordsize unsigned char root;...

CVS (Linux/FreeBSD) - Remote Entry Line Heap Overflow

include include include include include include include include include include include include include include typedef unsigned char uchar; void progressvoid; int brutecvsrootvoid; int bruteusernamevoid; int brutepasswordvoid; void hdlcrashedint; void bsdexploitationvoid; void tryexploitvoid; vo...

CVS - Remote Entry Line Root Heap Overflow

include include include include include include include include include include include include include include define CVSPORT 2401 define RET 0xffbffd20 define NOP 0x82102017 define ROUNDs if s % wordsize s += wordsize - s % wordsize unsigned char root; unsigned char user; unsigned char pass;...

Horde Chora CVS Viewer diff Utility Arbitrary Command Execution

The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the...

[SECURITY] [DSA 519-1] New CVS packages fix several potential security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 519-1 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 519-1] New CVS packages fix several potential security problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 519-1 [email protected] http://www.debian.org/security/ Martin Schulze June 15th, 2004 http://www.debian.org/security/faq -...