PT-2003-1986 · Cvs · Cvs Server

Publicado 2003-12-10 · Atualizado 2017-10-11 · CVE-2003-0977

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CVS server versions prior to 1.11.10

Description The issue allows attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.

Recommendations For versions prior to 1.11.10, update to version 1.11.10 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2003-0977

RHSA-2004:004

Produtos afetados

Cvs Server

Referências · 19

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528 · Nota
• http://redhat.com/support/errata/RHSA-2004-004.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13929 · Nota
• http://marc.info/?l=bugtraq&m=107540163908129&w=2 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0977 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855 · Nota
• http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1 · Correção
• http://mandriva.com/security/advisories?name=MDKSA-2003:112 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2004-003.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=107168035515554&w=2 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc · Aviso do Fabricante
• http://secunia.com/advisories/10601 · Nota
• http://debian.org/security/2004/dsa-422 · Aviso do Fabricante