PT-2004-1543 · Cvs · Cvs

Publicado 2004-05-20 · Atualizado 2017-10-11 · CVE-2004-0396

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CVS versions 1.11.x up to 1.11.15 CVS versions 1.12.x up to 1.12.7

Description A heap-based buffer overflow issue exists when using the pserver mechanism, allowing remote attackers to execute arbitrary code via Entry lines.

Recommendations For CVS versions 1.11.x up to 1.11.15, update to a version later than 1.11.15 to resolve the issue. For CVS versions 1.12.x up to 1.12.7, update to a version later than 1.12.7 to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2004-0396

DSA-505

RHSA-2004:190

Produtos afetados

Cvs

Referências · 34

• 🔥 https://exploit-db.com/exploits/300 · Exploit
• 🔥 https://exploit-db.com/exploits/301 · Exploit
• http://ciac.org/ciac/bulletins/o-147.shtml · Nota
• http://secunia.com/advisories/11674 · Nota
• http://security.e-matters.de/advisories/072004.html · Nota
• http://securityfocus.com/bid/10384 · Nota
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc · Aviso do Fabricante
• http://secunia.com/advisories/11651 · Nota
• http://marc.info/?l=bugtraq&m=108636445031613&w=2 · Aviso do Fabricante
• http://osvdb.org/6305 · Nota
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc · Aviso do Fabricante
• http://secunia.com/advisories/11647 · Nota
• http://kb.cert.org/vuls/id/192038 · Correção
• http://secunia.com/advisories/11652 · Nota
• http://debian.org/security/2004/dsa-505 · Aviso do Fabricante