An attacker may execute arbitrary commands on the remote system.
Description
The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system as cvs does not drop root privileges properly.
