CVE-2003-0015 Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypas...
HighCVSS 7.5
EPSS 23.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | = 4.4 | No fix listed |
| freebsd | = 4.5 | No fix listed |
| freebsd | = 4.6 | No fix listed |
| freebsd | = 4.7 | No fix listed |
| freebsd | = 5.0 | No fix listed |
| cvs | = 1.10.7 | No fix listed |
| cvs | = 1.10.8 | No fix listed |
| cvs | = 1.11 | No fix listed |
| cvs | = 1.11.1 | No fix listed |
| cvs | = 1.11.1p1 | No fix listed |
| cvs | = 1.11.2 | No fix listed |
| cvs | = 1.11.3 | No fix listed |
| cvs | = 1.11.4 | No fix listed |
| debian/cvs(Debian:12) | < 1.11.2-5.1 | 1.11.2-5.1 |
| debian/cvs(Debian:13) | < 1.11.2-5.1 | 1.11.2-5.1 |
| debian/cvs(Debian:14) | < 1.11.2-5.1 | 1.11.2-5.1 |
References
- Debian Security Tracker CVE-2003-0015 vendor-advisory
- 20030120 Advisory 01/2003: CVS remote vulnerability mailing-list
- ccvs.cvshome.org broken-link
- 20030122 [security@slackware.com: [slackware-security] New CVS packages available] mailing-list
- 20030124 Test program for CVS double-free. mailing-list
- 20030202 Exploit for CVS double free() for Linux pserver mailing-list
- FreeBSD-SA-03:01 vendor-advisory
- RHSA-2003:013 patch vendor-advisory
- security.e-matters.de patch vendor-advisory
- CA-2003-02 third-party-advisory us-government-resource
- N-032 government-resource third-party-advisory
- DSA-233 vendor-advisory
- VU#650937 third-party-advisory us-government-resource
- MDKSA-2003:009 vendor-advisory
- RHSA-2003:012 vendor-advisory
- 6650 vdb-entry
- cvs-doublefree-memory-corruption(11108) vdb-entry