Vulnerabilities > Openpkg > Critical

DATE CVE VULNERABILITY TITLE RISK
2004-08-06 CVE-2004-0414 CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
network
low complexity
cvs openpkg sgi gentoo openbsd
critical
 10.0
10
2004-08-06 CVE-2004-0413 Remote Integer Overflow vulnerability in Subversion SVN Protocol Parser
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.
network
low complexity
openpkg subversion
critical
 10.0
10
2002-03-15 CVE-2002-0083 Off-by-one Error vulnerability in multiple products
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. 		9.8
9.8