Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
20 Nov 2024, 23:50
Type | Values Removed | Values Added |
---|---|---|
References | () ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc - Vendor Advisory | |
References | () http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html - Vendor Advisory | |
References | () http://security.e-matters.de/advisories/092004.html - | |
References | () http://www.securityfocus.com/bid/10499 - Patch | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/16365 - |
Information
Published : 2004-12-31 05:00
Updated : 2024-11-20 23:50
NVD link : CVE-2004-1471
Mitre link : CVE-2004-1471
CVE.ORG link : CVE-2004-1471
JSON object : View
Products Affected
gentoo
- linux
openbsd
- openbsd
openpkg
- openpkg
cvs
- cvs
freebsd
- freebsd
sgi
- propack
CWE