CVEvulnerability

CVE-2003-0015

7.5 HIGH Published 2003-02-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-02-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-415

Description

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.

Affected configurations

• freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.7 • freebsd freebsd 5.0 • cvs cvs 1.10.7 • cvs cvs 1.10.8 • cvs cvs 1.11 • cvs cvs 1.11.1 • cvs cvs 1.11.1p1 • cvs cvs 1.11.2 • cvs cvs 1.11.3 • cvs cvs 1.11.4

Related

Weakness · CWE (1)

References