CVE-2012-0804 | | | 2012-05-29 | Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (cr… |
CVE-2005-2693 | | | 2005-08-26 | cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a sy… |
CVE-2004-1342 | | | 2005-04-27 | CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method. |
CVE-2005-0753 | | | 2005-04-18 | Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. |
CVE-2004-1471 | | | 2004-12-31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a… |
CVE-2004-1343 | | | 2004-12-31 | CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allo… |
CVE-2004-0418 | | | 2004-08-06 | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform a… |
CVE-2004-0417 | | | 2004-08-06 | Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attack… |
CVE-2004-0416 | | | 2004-08-06 | Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitr… |
CVE-2004-0414 | | | 2004-08-06 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and m… |
CVE-2004-0396 | | | 2004-06-14 | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary… |
CVE-2004-0405 | | | 2004-06-01 | CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-… |
CVE-2004-0180 | | | 2004-06-01 | The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during c… |
CVE-2003-0977 | | | 2004-01-05 | CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module re… |
CVE-2003-0015 | | | 2003-02-07 | Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Di… |
CVE-2002-0092 | | | 2002-03-15 | CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capabi… |
CVE-2000-0680 | | | 2000-10-20 | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modi… |
CVE-2000-0679 | | | 2000-10-20 | The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files. |