CVE-2002-0844 Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.
HighCVSS 7.8
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| distrotech cvs | < 1.11.2 | 1.11.2 |
| debian/cvs(Debian:12) | < 1:1.11.2 | 1:1.11.2 |
| debian/cvs(Debian:13) | < 1:1.11.2 | 1:1.11.2 |
| debian/cvs(Debian:14) | < 1:1.11.2 | 1:1.11.2 |
References
- 20020525 [DER ADV#8] - Local off by one in CVSD broken-link exploit mailing-list patch vendor-advisory
- 20020525 [DER ADV#8] - Local off by one in CVSD mailing-list
- RHSA-2004:004 broken-link vendor-advisory
- 4829 broken-link patch third-party-advisory vdb-entry vendor-advisory
- cvs-rcs-offbyone-bo(9175) third-party-advisory vdb-entry
- Debian Security Tracker CVE-2002-0844 vendor-advisory