← Back

Cvs

cvs

Vendor: Gnu • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-12836
3Canonical
DebianGnu
3Cvs
Debian LinuxUbuntu Linux
May 13, 2026
Aug 24, 2017
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
CVE-2004-0778
1Gnu
1Cvs
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error me...Show more
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.Show less