Vulnerabilities > CVS > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-04-27 | CVE-2004-1342 | Unspecified vulnerability in CVS CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method. | 7.5 |
| 2005-04-18 | CVE-2005-0753 | Unspecified vulnerability in CVS Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code. | 7.5 |
| 2004-12-31 | CVE-2004-1471 | Multiple vulnerability in CVS Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line. | 7.1 |
| 2004-06-14 | CVE-2004-0396 | Heap Overflow vulnerability in CVS Malformed Entry Modified and Unchanged Flag Insertion Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. | 7.5 |
| 2004-01-05 | CVE-2003-0977 | CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests. | 7.5 |
| 2003-02-07 | CVE-2003-0015 | Double Free vulnerability in multiple products Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands. | 7.5 |
| 2000-10-20 | CVE-2000-0680 | Unspecified vulnerability in CVS 1.10.8 The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action. | 7.2 |