CVE-2000-0679 The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
LowCVSS 2.1
EPSS 0.72%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cvs | = 1.10.8 | No fix listed |
References
- 1523 exploit vdb-entry vendor-advisory
- 20000728 cvs security problem exploit mailing-list vendor-advisory