NetSight
IP …
critical10.0Public exploit code

CVE-2004-0416

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.

Affected products

VendorProductAffected versions
CvsCvs
Versions 1.10.7, 1.10.8, 1.11, 1.11.1, 1.11.1_p1, 1.11.2
OpenpkgOpenpkg
All versions
Versions 1.3, 2.0
SgiPropack
Versions 2.4, 3.0
GentooLinux
Version 1.4
OpenbsdOpenbsd
All versions
Versions 3.4, 3.5

Weakness classification

CWE-119

References