Detections
Analytics
RHEL 2.1 / 3 : cvs (RHSA-2004:233)
critical Nessus Plugin ID 12500
Synopsis
The remote Red Hat host is missing a security update.Description
An updated cvs package that fixes several server vulnerabilities, which could be exploited by a malicious client, is now available.CVS is a version control system frequently used to manage source code repositories.
While investigating a previously fixed vulnerability, Derek Price discovered a flaw relating to malformed 'Entry' lines which lead to a missing NULL terminator. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0414 to this issue.
Stefan Esser and Sebastian Krahmer conducted an audit of CVS and fixed a number of issues that may have had security consequences.
Among the issues deemed likely to be exploitable were :
-- a double-free relating to the error_prog_name string (CVE-2004-0416) -- an argument integer overflow (CVE-2004-0417) -- out-of-bounds writes in serv_notify (CVE-2004-0418).
An attacker who has access to a CVS server may be able to execute arbitrary code under the UID on which the CVS server is executing.
Users of CVS are advised to upgrade to this updated package, which contains backported patches correcting these issues.
Red Hat would like to thank Stefan Esser, Sebastian Krahmer, and Derek Price for auditing, disclosing, and providing patches for these issues.
Solution
Update the affected cvs package.See Also
https://access.redhat.com/security/cve/cve-2004-0418
https://access.redhat.com/security/cve/cve-2004-0778
https://access.redhat.com/errata/RHSA-2004:233
https://access.redhat.com/security/cve/cve-2004-0414
Plugin Details
Severity: Critical
ID: 12500
File Name: redhat-RHSA-2004-233.nasl
Version: 1.32
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 7/6/2004
Updated: 1/14/2021
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:redhat:enterprise_linux:cvs, cpe:/o:redhat:enterprise_linux:2.1, cpe:/o:redhat:enterprise_linux:3
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/9/2004
Vulnerability Publication Date: 8/6/2004
Reference Information
CVE: CVE-2004-0414, CVE-2004-0416, CVE-2004-0417, CVE-2004-0418, CVE-2004-0778