CVE-2004-1471 Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) an...
HighCVSS 7.1
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cvs | = 1.10.7 | No fix listed |
| cvs | = 1.10.8 | No fix listed |
| cvs | = 1.11 | No fix listed |
| cvs | = 1.11.1 | No fix listed |
| cvs | = 1.11.1_p1 | No fix listed |
| cvs | = 1.11.2 | No fix listed |
| cvs | = 1.11.3 | No fix listed |
| cvs | = 1.11.4 | No fix listed |
| cvs | = 1.11.5 | No fix listed |
| cvs | = 1.11.6 | No fix listed |
| cvs | = 1.11.10 | No fix listed |
| cvs | = 1.11.11 | No fix listed |
| cvs | = 1.11.14 | No fix listed |
| cvs | = 1.11.15 | No fix listed |
| cvs | = 1.11.16 | No fix listed |
| cvs | = 1.12.1 | No fix listed |
| cvs | = 1.12.2 | No fix listed |
| cvs | = 1.12.5 | No fix listed |
| cvs | = 1.12.7 | No fix listed |
| cvs | = 1.12.8 | No fix listed |
| openpkg | = 1.3 | No fix listed |
| openpkg | = 2.0 | No fix listed |
| openpkg | = current | No fix listed |
| sgi propack | = 2.4 | No fix listed |
| sgi propack | = 3.0 | No fix listed |
Show 89 more
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | = 1.1.5.1 | No fix listed |
| freebsd | = 2.0 | No fix listed |
| freebsd | = 2.0.5 | No fix listed |
| freebsd | = 2.1.0 | No fix listed |
| freebsd | = 2.1.5 | No fix listed |
| freebsd | = 2.1.6 | No fix listed |
| freebsd | = 2.1.6.1 | No fix listed |
| freebsd | = 2.1.7.1 | No fix listed |
| freebsd | = 2.2 | No fix listed |
| freebsd | = 2.2.2 | No fix listed |
| freebsd | = 2.2.3 | No fix listed |
| freebsd | = 2.2.4 | No fix listed |
| freebsd | = 2.2.5 | No fix listed |
| freebsd | = 2.2.6 | No fix listed |
| freebsd | = 2.2.8 | No fix listed |
| freebsd | = 3.0 | No fix listed |
| freebsd | = 3.0-releng | No fix listed |
| freebsd | = 3.1 | No fix listed |
| freebsd | = 3.2 | No fix listed |
| freebsd | = 3.3 | No fix listed |
| freebsd | = 3.4 | No fix listed |
| freebsd | = 3.5 | No fix listed |
| freebsd | = 3.5-stable | No fix listed |
| freebsd | = 3.5.1 | No fix listed |
| freebsd | = 3.5.1-release | No fix listed |
| freebsd | = 3.5.1-stable | No fix listed |
| freebsd | = 4.0 | No fix listed |
| freebsd | = 4.0-alpha | No fix listed |
| freebsd | = 4.0-releng | No fix listed |
| freebsd | = 4.1 | No fix listed |
| freebsd | = 4.1.1 | No fix listed |
| freebsd | = 4.1.1-release | No fix listed |
| freebsd | = 4.1.1-stable | No fix listed |
| freebsd | = 4.2 | No fix listed |
| freebsd | = 4.2-stable | No fix listed |
| freebsd | = 4.3 | No fix listed |
| freebsd | = 4.3-release | No fix listed |
| freebsd | = 4.3-release_p38 | No fix listed |
| freebsd | = 4.3-releng | No fix listed |
| freebsd | = 4.3-stable | No fix listed |
| freebsd | = 4.4 | No fix listed |
| freebsd | = 4.4-release_p42 | No fix listed |
| freebsd | = 4.4-releng | No fix listed |
| freebsd | = 4.4-stable | No fix listed |
| freebsd | = 4.5 | No fix listed |
| freebsd | = 4.5-release | No fix listed |
| freebsd | = 4.5-release_p32 | No fix listed |
| freebsd | = 4.5-releng | No fix listed |
| freebsd | = 4.5-stable | No fix listed |
| freebsd | = 4.6 | No fix listed |
| freebsd | = 4.6-release | No fix listed |
| freebsd | = 4.6-release_p20 | No fix listed |
| freebsd | = 4.6-releng | No fix listed |
| freebsd | = 4.6-stable | No fix listed |
| freebsd | = 4.6.2 | No fix listed |
| freebsd | = 4.7 | No fix listed |
| freebsd | = 4.7-release | No fix listed |
| freebsd | = 4.7-release_p17 | No fix listed |
| freebsd | = 4.7-releng | No fix listed |
| freebsd | = 4.7-stable | No fix listed |
| freebsd | = 4.8 | No fix listed |
| freebsd | = 4.8-pre-release | No fix listed |
| freebsd | = 4.8-release_p6 | No fix listed |
| freebsd | = 4.8-releng | No fix listed |
| freebsd | = 4.9 | No fix listed |
| freebsd | = 4.9-pre-release | No fix listed |
| freebsd | = 4.9-releng | No fix listed |
| freebsd | = 4.10 | No fix listed |
| freebsd | = 4.10-release | No fix listed |
| freebsd | = 4.10-releng | No fix listed |
| freebsd | = 5.0 | No fix listed |
| freebsd | = 5.0-alpha | No fix listed |
| freebsd | = 5.0-release_p14 | No fix listed |
| freebsd | = 5.0-releng | No fix listed |
| freebsd | = 5.1 | No fix listed |
| freebsd | = 5.1-alpha | No fix listed |
| freebsd | = 5.1-release | No fix listed |
| freebsd | = 5.1-release_p5 | No fix listed |
| freebsd | = 5.1-releng | No fix listed |
| freebsd | = 5.2 | No fix listed |
| freebsd | = 5.2.1-release | No fix listed |
| freebsd | = 5.2.1-releng | No fix listed |
| gentoo linux | = 1.4 | No fix listed |
| OpenBSD | = 3.4 | No fix listed |
| OpenBSD | = 3.5 | No fix listed |
| OpenBSD | = current | No fix listed |
| debian/cvs(Debian:12) | < 1:1.12.9 | 1:1.12.9 |
| debian/cvs(Debian:13) | < 1:1.12.9 | 1:1.12.9 |
| debian/cvs(Debian:14) | < 1:1.12.9 | 1:1.12.9 |
References
- Debian Security Tracker CVE-2004-1471 vendor-advisory
- 20040609 Advisory 09/2004: More CVS remote vulnerabilities mailing-list vendor-advisory
- security.e-matters.de
- 10499 patch vdb-entry
- cvs-wrapper-format-string(16365) vdb-entry