Lucene search
Immunity CanvasPSERVERDHistoryJun 14, 2004 - 4:00 a.m.
Immunity Canvas: PSERVERD
2004-06-1404:00:00
Immunity Canvas
exploitlist.immunityinc.com
92
0.969 High
EPSS
Percentile
99.7%
| Name | pserverd |
|---|---|
| CVE | CVE-2004-0396 Exploit Pack |
| VENDOR: nongnu.org | |
| Notes: | |
| This overflow impacts CVS feature versions 1.12.7 and earlier, and | |
| stable versions | |
| 1.11.15 (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0396). |
ab note: cvsd running as root setuid’s to login user … so if you add a
root:cryptpass combo to the CVSROOT/passwd file … then re-own for the
root user … will get you a root shell. \o/
Date public: 03/2004
CERT Advisory:
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0396
CVSS: 7.5
Related
nessus
nessus
SuSE-SA:2004:013: cvs
2004-07-25 00:00:00
Debian DSA-505-1 : cvs - heap overflow
2004-09-29 00:00:00
Fedora Core 2 : cvs-1.11.15-6 (2004-131)
2004-07-23 00:00:00
slackware
slackware
cvs
2004-05-19 19:14:49
openvas
openvas
Slackware: Security Advisory (SSA:2004-140-01)
2012-09-10 00:00:00
Slackware Advisory SSA:2004-140-01 cvs
2012-09-11 00:00:00
Debian Security Advisory DSA 505-1 (cvs)
2008-01-17 00:00:00
checkpoint_advisories
checkpoint_advisories
CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)
2014-12-28 00:00:00
CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)
2014-12-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package cvs version 1.11.15-alt2
2004-05-10 00:00:00
nvd
nvd
CVE-2004-0396
2004-06-14 04:00:00
freebsd
freebsd
cvs pserver remote heap buffer overflow
2004-05-02 00:00:00
cvelist
cvelist
CVE-2004-0396
2004-05-20 04:00:00
securityvulns
securityvulns
Advisory 07/2004: CVS remote vulnerability
2004-05-19 00:00:00
osv
osv
cvs - heap overflow
2004-05-19 00:00:00
debian
debian
[SECURITY] [DSA 505-1] New cvs packages fix remote exploit
2004-05-19 08:58:27
[SECURITY] [DSA 505-1] New cvs packages fix remote exploit
2004-05-19 08:58:27
ubuntucve
ubuntucve
CVE-2004-0396
2004-06-14 00:00:00
cert
cert
CVS contains a heap overflow in the handling of flag insertion
2004-05-19 00:00:00
gentoo
gentoo
CVS heap overflow vulnerability
2004-05-20 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:10.cvs
2004-05-19 00:00:00
debiancve
debiancve
CVE-2004-0396
2004-06-14 04:00:00
cve
cve
CVE-2004-0396
2004-06-14 04:00:00
redhat
redhat
(RHSA-2004:190) cvs security update
2004-05-19 00:00:00
suse
suse
remote command execution in cvs
2004-05-19 11:10:20