← Back

CVE-2003-0977

nvd nist
Published: Jan 5, 2004Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.

Affected (13)

1 product
Cvs
1 product
Slackware Linux
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Cvs
Version 1.10.7
Version 1.10.8
Version 1.11.1
Version 1.11.1_p1
Version 1.11.2
Version 1.11.3
Version 1.11.4
Version 1.11.5
Version 1.11.6
Version 1.11
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Slackware
Version 8.1
Version 9.0
Version 9.1

References (30)

ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc (unsafe URL)
Source: cve@mitre.org
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.