CVE-2004-0396
Fixed in a distro release EPSS 68%
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
Products: cvs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cvs | 1:1.12.5-6 |
| Debian 13 | cvs | 1:1.12.5-6 |
| Debian 14 | cvs | 1:1.12.5-6 |
| Debian 3.0 | cvs | 1.11.1p1debian-9woody4 |
| Red Hat Enterprise Linux 3 | cvs | 0:1.11.2-22 |
| Red Hat Enterprise Linux 3 | cvs-debuginfo | 0:1.11.2-22 |