Vulnerability in Gnu Cvs
CVE-2004-0778
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.
Affected products
- Gnu Cvs
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE, Broken Link)
- cve@mitre.org (Broken Link, x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_IDEFENSE, Broken Link, Vendor Advisory, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)