Lucene search
HistoryOct 20, 2000 - 4:00 a.m.
CVE-2000-0680
cvs
cvs 1.10.8
server security
remote access
trojans
cve-2000-0680
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.4%
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action.
Affected configurations
Node
cvscvsMatch1.10.8
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.4%
Related for CVE-2000-0680