CVE-2005-2693
Fixed in a distro release EPSS <1%
cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.
Products: cvs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cvs | 1:1.11.5-4 |
| Debian 13 | cvs | 1:1.11.5-4 |
| Debian 14 | cvs | 1:1.11.5-4 |
| Debian 3.0 | cvs | 1.11.1p1debian-13 |
| Debian 3.0 | gcvs | 1.0a7-2woody1 |
| Debian 3.1 | gcvs | 1.0final-5sarge1 |
| Red Hat Enterprise Linux 3 | cvs | 0:1.11.2-28 |
| Red Hat Enterprise Linux 3 | cvs-debuginfo | 0:1.11.2-28 |
| Red Hat Enterprise Linux 4 | cvs | 0:1.11.17-8.RHEL4 |
| Red Hat Enterprise Linux 4 | cvs-debuginfo | 0:1.11.17-8.RHEL4 |