medium5.0
CVE-2004-0405
CVS before 1.11 allows CVS clients to read arbitrary files via ..
Impact
CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cvs | Cvs | through 1.10 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108636445031613&w=2
- http://security.gentoo.org/glsa/glsa-200404-13.xml
- http://www.debian.org/security/2004/dsa-486
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15891
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818
- http://marc.info/?l=bugtraq&m=108636445031613&w=2
- http://security.gentoo.org/glsa/glsa-200404-13.xml
- http://www.debian.org/security/2004/dsa-486
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15891
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818