CVE-2004-0396 Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
HighCVSS 7.5
EPSS 67.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cvs | = 1.11 | No fix listed |
| cvs | = 1.12 | No fix listed |
| debian/cvs(Debian:12) | < 1:1.12.5-6 | 1:1.12.5-6 |
| debian/cvs(Debian:13) | < 1:1.12.5-6 | 1:1.12.5-6 |
| debian/cvs(Debian:14) | < 1:1.12.5-6 | 1:1.12.5-6 |
References
- Debian Security Tracker CVE-2004-0396 vendor-advisory
- 20040519 Advisory 07/2004: CVS remote vulnerability mailing-list
- 20040519 Advisory 07/2004: CVS remote vulnerability mailing-list
- SuSE-SA:2004:013 vendor-advisory
- 20040519 Advisory 07/2004: CVS remote vulnerability mailing-list
- 20040519 [OpenPKG-SA-2004.022] OpenPKG Security Advisory (cvs) mailing-list
- FEDORA-2004-1620 vendor-advisory
- 20040520 cvs server buffer overflow vulnerability vendor-advisory
- 11641 third-party-advisory
- 11647 third-party-advisory
- 11651 third-party-advisory
- 11652 third-party-advisory
- 11674 third-party-advisory
- security.e-matters.de
- GLSA-200405-12 vendor-advisory
- O-147 government-resource third-party-advisory
- DSA-505 patch vendor-advisory
- VU#192038 patch third-party-advisory us-government-resource
- MDKSA-2004:048 vendor-advisory
- 6305 vdb-entry
- RHSA-2004:190 patch vendor-advisory
- 10384 vdb-entry
- SSA:2004-140-01 vendor-advisory
- TA04-147A third-party-advisory us-government-resource
- cvs-entry-line-bo(16193) vdb-entry
- oval:org.mitre.oval:def:9058 signature vdb-entry
- oval:org.mitre.oval:def:970 signature vdb-entry