Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0015
HistoryFeb 07, 2003 - 5:00 a.m.

CVE-2003-0015

2003-02-0705:00:00
CWE-415
[email protected]
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.296 Low

EPSS

Percentile

96.9%

JSON

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.

Affected configurations

NVD
Node
freebsdfreebsdMatch4.4
OR
freebsdfreebsdMatch4.5
OR
freebsdfreebsdMatch4.6
OR
freebsdfreebsdMatch4.7
OR
freebsdfreebsdMatch5.0
Node
cvscvsMatch1.10.7
OR
cvscvsMatch1.10.8
OR
cvscvsMatch1.11
OR
cvscvsMatch1.11.1
OR
cvscvsMatch1.11.1p1
OR
cvscvsMatch1.11.2
OR
cvscvsMatch1.11.3
OR
cvscvsMatch1.11.4

Related

slackware 1
osv 1
nessus 6
cert 1
openvas 2
d2 1
cve 1
securityvulns 2
debian 2
debiancve 1
redhat 1
ubuntucve 1
cvelist 1
suse 1
slackware
slackware
New CVS packages available
2003-01-21 14:26:20
osv
osv
cvs - doubly freed memory
2003-01-21 00:00:00
nessus
nessus
Debian DSA-233-1 : cvs - doubly freed memory
2004-09-29 00:00:00
SSA-18708 New CVS packages available
2005-07-13 00:00:00
Mandrake Linux Security Advisory : cvs (MDKSA-2003:009)
2004-07-31 00:00:00
cert
cert
Concurrent Versions System (CVS) server improperly deallocates memory
2003-01-21 00:00:00
openvas
openvas
Debian Security Advisory DSA 233-1 (cvs)
2008-01-17 00:00:00
Debian Security Advisory DSA 233-1 (cvs)
2008-01-17 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_PSERVERD
2003-02-07 05:00:00
cve
cve
CVE-2003-0015
2004-09-01 04:00:00
securityvulns
securityvulns
Advisory 01/2003: CVS remote vulnerability
2003-01-23 00:00:00
CERT Advisory CA-2003-02 Double-Free Bug in CVS Server
2003-01-23 00:00:00
debian
debian
[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution
2003-01-21 14:05:10
[SECURITY] [DSA 233-1] New cvs packages fix arbitrary code execution
2003-01-21 14:05:10
debiancve
debiancve
CVE-2003-0015
2004-09-01 04:00:00
redhat
redhat
(RHSA-2003:013) cvs security update
2003-02-06 00:00:00
ubuntucve
ubuntucve
CVE-2003-0015
2003-02-07 00:00:00
cvelist
cvelist
CVE-2003-0015
2004-09-01 04:00:00
suse
suse
remote system compromise in cvs
2003-01-22 16:52:12

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.296 Low

EPSS

Percentile

96.9%

JSON
Related for NVD:CVE-2003-0015
slackware1osv1nessus6cert1openvas2d21cve1securityvulns2debian2debiancve1redhat1ubuntucve1cvelist1suse1