CVE-2003-0977

Description

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528

https://exchange.xforce.ibmcloud.com/vulnerabilities/13929

http://www.redhat.com/support/errata/RHSA-2004-004.html

http://www.redhat.com/support/errata/RHSA-2004-003.html

http://www.mandriva.com/security/advisories?name=MDKSA-2003:112

http://www.debian.org/security/2004/dsa-422

http://secunia.com/advisories/10601

http://marc.info/?l=bugtraq&m=107540163908129&w=2

http://marc.info/?l=bugtraq&m=107168035515554&w=2

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808

http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3