CVE-2003-0977
Fixed in a distro release EPSS 2%
CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
Products: cvs, slackware_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cvs | 1:1.11.10 |
| Debian 13 | cvs | 1:1.11.10 |
| Debian 14 | cvs | 1:1.11.10 |
| Red Hat Enterprise Linux 3 | cvs | 0:1.11.2-14 |