Vulnerability in Cvs

CVE-2004-1342

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.

EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.

Affected products

  • Cvs — versions 1.10, 1.10.6, 1.10.7
  • N/a — versions n/a

References

  • cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)