low2.1Public exploit code
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CVS Kit CVS Server 1.10.8 - Instructed File Create2000-07-28 · local · unix · Verified
Impact
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cvs | Cvs | Version 1.10.8 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/1523
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org
- http://www.securityfocus.com/bid/1523
- http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org