PT-2003-1986 · Cvs · Cvs Server

Published 2003-12-10 · Updated 2017-10-11 · CVE-2003-0977

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CVS server versions prior to 1.11.10

Description The issue allows attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.

Recommendations For versions prior to 1.11.10, update to version 1.11.10 or later to resolve the issue.

Fix

Related Identifiers

CVE-2003-0977

RHSA-2004:004

Affected Products

Cvs Server

References · 19

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-004.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0977 · Vendor Advisory
• http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1 · Patch
• http://mandriva.com/security/advisories?name=MDKSA-2003:112 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-003.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc · Vendor Advisory
• http://debian.org/security/2004/dsa-422 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0977 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0977 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0977 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13929 · Note
• http://marc.info/?l=bugtraq&m=107540163908129&w=2 · Note