Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0396
HistoryJun 14, 2004 - 4:00 a.m.

CVE-2004-0396

2004-06-1404:00:00
[email protected]
web.nvd.nist.gov
31
cve-2004-0396
buffer overflow
cvs
security vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

Affected configurations

NVD
Node
cvscvsMatch1.11
OR
cvscvsMatch1.12
CPENameOperatorVersion
cvs:cvscvseq1.11
cvs:cvscvseq1.12

References

Related

nessus 10
slackware 1
openvas 10
checkpoint_advisories 2
altlinux 1
nvd 1
freebsd 1
cvelist 1
canvas 1
debian 2
ubuntucve 1
securityvulns 1
osv 1
cert 1
gentoo 1
freebsd_advisory 1
debiancve 1
redhat 1
suse 1
nessus
nessus
SuSE-SA:2004:013: cvs
2004-07-25 00:00:00
Debian DSA-505-1 : cvs - heap overflow
2004-09-29 00:00:00
GLSA-200405-12 : CVS heap overflow vulnerability
2004-08-30 00:00:00
slackware
slackware
cvs
2004-05-19 19:14:49
openvas
openvas
Slackware: Security Advisory (SSA:2004-140-01)
2012-09-10 00:00:00
Slackware Advisory SSA:2004-140-01 cvs
2012-09-11 00:00:00
Debian Security Advisory DSA 505-1 (cvs)
2008-01-17 00:00:00
checkpoint_advisories
checkpoint_advisories
CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)
2014-12-28 00:00:00
CVS Entry Line Flag Remote Heap Overflow - Ver2 (CVE-2004-0396)
2014-12-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package cvs version 1.11.15-alt2
2004-05-10 00:00:00
nvd
nvd
CVE-2004-0396
2004-06-14 04:00:00
freebsd
freebsd
cvs pserver remote heap buffer overflow
2004-05-02 00:00:00
cvelist
cvelist
CVE-2004-0396
2004-05-20 04:00:00
canvas
canvas
Immunity Canvas: PSERVERD
2004-06-14 04:00:00
debian
debian
[SECURITY] [DSA 505-1] New cvs packages fix remote exploit
2004-05-19 08:58:27
[SECURITY] [DSA 505-1] New cvs packages fix remote exploit
2004-05-19 08:58:27
ubuntucve
ubuntucve
CVE-2004-0396
2004-06-14 00:00:00
securityvulns
securityvulns
Advisory 07/2004: CVS remote vulnerability
2004-05-19 00:00:00
osv
osv
cvs - heap overflow
2004-05-19 00:00:00
cert
cert
CVS contains a heap overflow in the handling of flag insertion
2004-05-19 00:00:00
gentoo
gentoo
CVS heap overflow vulnerability
2004-05-20 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-04:10.cvs
2004-05-19 00:00:00
debiancve
debiancve
CVE-2004-0396
2004-06-14 04:00:00
redhat
redhat
(RHSA-2004:190) cvs security update
2004-05-19 00:00:00
suse
suse
remote command execution in cvs
2004-05-19 11:10:20

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.969 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2004-0396
nessus10slackware1openvas10checkpoint_advisories2altlinux1nvd1freebsd1cvelist1canvas1debian2ubuntucve1securityvulns1osv1cert1gentoo1freebsd_advisory1debiancve1redhat1suse1