Vulnerability in Cvs

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.

EPSS: 0.007 (50.2th percentile) — read the EPSS interpretation.

Affected products

  • Cvs — versions 1.10.8
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
  • cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)