CVE-2004-0180
Fixed in a distro release EPSS 2%
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.
Products: cvs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cvs | 1:1.12.5-4 |
| Debian 13 | cvs | 1:1.12.5-4 |
| Debian 14 | cvs | 1:1.12.5-4 |
| Debian 3.0 | cvs | 1.11.1p1debian-9woody2 |
| Red Hat Enterprise Linux 3 | cvs | 0:1.11.2-18 |
| Red Hat Enterprise Linux 3 | cvs-debuginfo | 0:1.11.2-18 |