Concurrent Versions Software Project Security Vulnerabilities

CVE-2000-0338

Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.