CVE-2004-0417
Fixed in a distro release EPSS 3%
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
Products: cvs, openpkg, sgi propack, gentoo linux, openbsd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cvs | 1:1.12.9-1 |
| Debian 13 | cvs | 1:1.12.9-1 |
| Debian 14 | cvs | 1:1.12.9-1 |
| Debian 3.0 | cvs | 1.11.1p1debian-9woody7 |
| Red Hat Enterprise Linux 3 | cvs | 0:1.11.2-24 |
| Red Hat Enterprise Linux 3 | cvs-debuginfo | 0:1.11.2-24 |