CVE-2004-0396

Published: Jun 14, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

Affected (2)

Products: Cvs: Cvs

Cvs

1 product

Cvs

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cvs Cvs	Version 1.11
Cvs Cvs	Version 1.12

References (56)

ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc (unsafe URL)

Source: cve@mitre.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html

Source: cve@mitre.org

http://cert.uni-stuttgart.de/archive/bugtraq/2004/05/msg00219.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021742.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108498454829020&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108500040719512&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108636445031613&w=2

Source: cve@mitre.org

http://marc.info/?l=openbsd-security-announce&m=108508894405639&w=2

Source: cve@mitre.org

http://secunia.com/advisories/11641

Source: cve@mitre.org

http://secunia.com/advisories/11647

Source: cve@mitre.org

http://secunia.com/advisories/11651

Source: cve@mitre.org

http://secunia.com/advisories/11652

Source: cve@mitre.org

http://secunia.com/advisories/11674

Source: cve@mitre.org

http://security.e-matters.de/advisories/072004.html

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200405-12.xml

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/o-147.shtml

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-505

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/192038

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2004:048

Source: cve@mitre.org

http://www.osvdb.org/6305

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-190.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/10384

Source: cve@mitre.org

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.395865

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA04-147A.html

Source: cve@mitre.org

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/16193

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9058

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A970

Source: cve@mitre.org

ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc (unsafe URL)