NetSight
IP …
high7.5Public exploit code

CVE-2003-0015

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Di…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.

Affected products

VendorProductAffected versions
FreebsdFreebsd
Versions 4.4, 4.5, 4.6, 4.7, 5.0
CvsCvs
Versions 1.10.7, 1.10.8, 1.11, 1.11.1, 1.11.1p1, 1.11.2

Weakness classification

CWE-415

References