Detections
Analytics

CVS < 1.11.17 / 1.12.9 Multiple Vulnerabilities

high Nessus Plugin ID 12265

Language:

Synopsis

The remote CVS server is affected by multiple issues.

Description

The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system because of a flaw relating to malformed Entry lines which lead to a missing NULL terminator.

Among the issues deemed likely to be exploitable were:

 - A double-free relating to the error_prog_name string. (CVE-2004-0416)

 - An argument integer overflow. (CVE-2004-0417)

 - Out-of-bounds writes in serv_notify. (CVE-2004-0418)

Solution

Upgrade to CVS 1.12.9 or 1.11.17.

See Also

https://seclists.org/fulldisclosure/2004/Jun/234

Plugin Details

Severity: High

ID: 12265

File Name: cvs_malformed_entry_lines_flaw.nasl

Version: 1.28

Type: remote

Family: Misc.

Published: 6/9/2004

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 6/9/2004

Reference Information

CVE: CVE-2004-0414, CVE-2004-0416, CVE-2004-0417, CVE-2004-0418, CVE-2004-1471

BID: 10499

CWE: 119

RHSA: 2004:233-017