CVE-2012-0804

2012-02-0900:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.8%

JSON

Heap-based buffer overflow in the proxy_connect function in src/client.c in
CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted HTTP
response.

Notes

Author	Note
mdeslaur	DSA-2407-1

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchcvs< 1:1.12.13-12ubuntu1.10.04.1UNKNOWN
ubuntu10.10noarchcvs< 1:1.12.13-12ubuntu1.10.10.1UNKNOWN
ubuntu11.04noarchcvs< 1:1.12.13-12ubuntu1.11.04.1UNKNOWN
ubuntu11.10noarchcvs< 2:1.12.13+real-6ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	cvs	< 1:1.12.13-12ubuntu1.10.04.1	UNKNOWN
ubuntu	10.10	noarch	cvs	< 1:1.12.13-12ubuntu1.10.10.1	UNKNOWN
ubuntu	11.04	noarch	cvs	< 1:1.12.13-12ubuntu1.11.04.1	UNKNOWN
ubuntu	11.10	noarch	cvs	< 2:1.12.13+real-6ubuntu0.1	UNKNOWN