CVE-2010-1326

2010-09-1500:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.038 Low

EPSS

Percentile

91.8%

JSON

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03
before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before
build 3736, and 2009 before 3729 allows remote attackers to bypass the
permissions check, modify arbitrary modules and directories within CVSROOT,
and execute arbitrary code via a crafted branch name ACL, possibly related
to incorrect inheritance.