CVEvulnerability
CVE-2000-0679
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2000-10-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
Affected configurations
• cvs cvs 1.10.8
References
- http://www.securityfocus.com/bid/1523 Exploit, Vendor Advisory
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/1523 Exploit, Vendor Advisory
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org Exploit, Vendor Advisory