Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cvs cvs 1.11.15 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0414
CVS 1.12.x up to and including 1.12.8, and 1.11.x up to and including 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbit...
Cvs Cvs 1.11.14Cvs Cvs 1.11.15Cvs Cvs 1.12.1Cvs Cvs 1.12.2Sgi Propack 2.4Sgi Propack 3.0Cvs Cvs 1.11Cvs Cvs 1.11.1Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.3Cvs Cvs 1.11.4Cvs Cvs 1.12.8Openpkg OpenpkgCvs Cvs 1.10.7Cvs Cvs 1.10.8Cvs Cvs 1.11.16Cvs Cvs 1.11.2Cvs Cvs 1.12.5Cvs Cvs 1.12.7Cvs Cvs 1.11.10Cvs Cvs 1.11.11Cvs Cvs 1.11.5
10
CVSSv2
CVE-2004-0416
Double free vulnerability for the error_prog_name string in CVS 1.12.x up to and including 1.12.8, and 1.11.x up to and including 1.11.16, may allow remote malicious users to execute arbitrary code.
Cvs Cvs 1.10.7Cvs Cvs 1.10.8Cvs Cvs 1.11Cvs Cvs 1.11.16Cvs Cvs 1.11.2Cvs Cvs 1.12.5Cvs Cvs 1.12.7Cvs Cvs 1.11.10Cvs Cvs 1.11.11Cvs Cvs 1.11.5Cvs Cvs 1.11.6Openpkg Openpkg 1.3Openpkg Openpkg 2.0Cvs Cvs 1.11.14Cvs Cvs 1.11.15Cvs Cvs 1.12.1Cvs Cvs 1.12.2Sgi Propack 2.4Sgi Propack 3.0Cvs Cvs 1.11.1Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.3
10
CVSSv2
CVE-2004-0418
serve_notify in CVS 1.12.x up to and including 1.12.8, and 1.11.x up to and including 1.11.16, does not properly handle empty data lines, which may allow remote malicious users to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify cri...
Cvs Cvs 1.11.10Cvs Cvs 1.11.11Cvs Cvs 1.11.6Cvs Cvs 1.12.1Openpkg Openpkg 2.0Sgi Propack 2.4Cvs Cvs 1.10.8Cvs Cvs 1.11Cvs Cvs 1.11.16Cvs Cvs 1.11.2Cvs Cvs 1.11.3Cvs Cvs 1.12.7Cvs Cvs 1.12.8Cvs Cvs 1.11.1Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.4Cvs Cvs 1.11.5Openpkg OpenpkgOpenpkg Openpkg 1.3Cvs Cvs 1.10.7Cvs Cvs 1.11.14Cvs Cvs 1.11.15
7.5
CVSSv2
CVE-2004-1342
CVS 1.12 and previous versions on Debian GNU/Linux, when using the repouid patch, allows remote malicious users to bypass authentication via the pserver access method.
Cvs Cvs 1.11.1Cvs Cvs 1.11.10Cvs Cvs 1.11.4Cvs Cvs 1.11.6Cvs Cvs 1.11.14Cvs Cvs 1.11.15Cvs Cvs 1.11.16Cvs Cvs 1.11.2Cvs Cvs 1.10Cvs Cvs 1.10.6Cvs Cvs 1.10.7Cvs Cvs 1.10.8Cvs Cvs 1.12Cvs Cvs 1.11Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.11Cvs Cvs 1.11.3Cvs Cvs 1.11.5
7.5
CVSSv2
CVE-2005-0753
Buffer overflow in CVS prior to 1.11.20 allows remote malicious users to execute arbitrary code.
Cvs Cvs 1.10Cvs Cvs 1.11.11Cvs Cvs 1.11.14Cvs Cvs 1.11.6Cvs Cvs 1.10.6Cvs Cvs 1.10.7Cvs Cvs 1.11.15Cvs Cvs 1.11.16Cvs Cvs 1.11.1Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.10Cvs Cvs 1.11.4Cvs Cvs 1.11.5Cvs Cvs 1.10.8Cvs Cvs 1.11Cvs Cvs 1.11.2Cvs Cvs 1.11.3
7.5
CVSSv2
CVE-2004-0396
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote malicious users to execute arbitrary code via Entry lines.
Cvs Cvs 1.12Cvs Cvs 1.11
7.1
CVSSv2
CVE-2004-1471
Format string vulnerability in wrapper.c in CVS 1.12.x up to and including 1.12.8, and 1.11.x up to and including 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string spec...
Cvs Cvs 1.11.10Cvs Cvs 1.11.11Cvs Cvs 1.11.5Cvs Cvs 1.11.6Openpkg Openpkg 2.0Openpkg Openpkg CurrentCvs Cvs 1.10.7Cvs Cvs 1.10.8Cvs Cvs 1.11Cvs Cvs 1.11.16Cvs Cvs 1.11.2Cvs Cvs 1.12.5Cvs Cvs 1.12.7Cvs Cvs 1.11.14Cvs Cvs 1.11.15Cvs Cvs 1.12.1Cvs Cvs 1.12.2Sgi Propack 2.4Sgi Propack 3.0Cvs Cvs 1.11.1Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.3
5
CVSSv2
CVE-2004-1343
CVS 1.12 and previous versions on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote malicious users to cause a denial of service (server crash).
Cvs Cvs 1.10.7Cvs Cvs 1.11Cvs Cvs 1.11.16Cvs Cvs 1.11.3Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.10Cvs Cvs 1.11.11Cvs Cvs 1.11.14Cvs Cvs 1.10Cvs Cvs 1.10.6Cvs Cvs 1.11.5Cvs Cvs 1.11.6Cvs Cvs 1.12Cvs Cvs 1.10.8Cvs Cvs 1.11.1Cvs Cvs 1.11.15Cvs Cvs 1.11.2Cvs Cvs 1.11.4
5
CVSSv2
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x up to and including 1.12.8, and 1.11.x up to and including 1.11.16, may allow remote malicious users to cause a server crash, which could cause temporary data to remain undeleted...
Cvs Cvs 1.11.1Cvs Cvs 1.11.1 P1Cvs Cvs 1.11.3Cvs Cvs 1.11.4Openpkg OpenpkgOpenpkg Openpkg 1.3Cvs Cvs 1.10.7Cvs Cvs 1.11.14Cvs Cvs 1.11.15Cvs Cvs 1.12.1Cvs Cvs 1.12.2Sgi Propack 3.0Cvs Cvs 1.10.8Cvs Cvs 1.11Cvs Cvs 1.11.16Cvs Cvs 1.11.2Cvs Cvs 1.12.5Cvs Cvs 1.12.7Cvs Cvs 1.12.8Cvs Cvs 1.11.10Cvs Cvs 1.11.11Cvs Cvs 1.11.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook