Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cvs HIGH 10.0
CVE-2012-0804EPSS 8%

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of s…

Mitigation only
Fix from $1,950 2012-05-29
Cvs HIGH 7.5
CVE-2004-1342

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access metho…

Patch available
Fix from $1,950 2005-04-27
Cvs HIGH 7.5
CVE-2005-0753

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Patch available
Fix from $1,950 2005-04-18
Cvs MEDIUM 5.0
CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, …

Patch available
Fix from $1,600 2004-12-31
Cvs HIGH 7.5
CVE-2004-0396EPSS 68%

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute …

Patch available
Fix from $1,950 2004-06-14
Cvs MEDIUM 5.0
CVE-2004-0405

CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability…

Fix: after 1.10
Fix from $1,600 2004-06-01
Cvs HIGH 7.5
CVE-2003-0977

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed…

Patch available
Fix from $1,950 2004-01-05
Cvs MEDIUM 5.0
CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the d…

Fix: after 1.10.8
Fix from $1,600 2002-03-15
Cvs HIGH 7.2
CVE-2000-0680

The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committe…

Patch available
Fix from $1,950 2000-10-20