NetSight
medium5.0

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allo…

Impact

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).

Affected products

VendorProductAffected versions
CvsCvs
Versions 1.10, 1.10.6, 1.10.7, 1.10.8, 1.11, 1.11.1

References