VDB
CVE-2003-0977
CVE-2003-0977
PUBLISHED
CVSS 7.5 HIGH
CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
EPSS 2.47% · 84.4th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.47%
84.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cvs | cvs | 1.11.2, 1.10.7, 1.10.8 |
| n/a | n/a | n/a |
| slackware | slackware_linux | 8.1, 9.1, 9.0 |
Timeline
- CVE Published
- Sep 23, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
References
- 20040202-01-U vendor-advisory
- 20040103-01-U vendor-advisory
- DSA-422 vendor-advisory
- RHSA-2004:003 vendor-advisory
- 10601 third-party-advisory
- CLA-2004:808 vendor-advisory
- RHSA-2004:004 vendor-advisory
- http://marc.info/?l=bugtraq&m=107168035515554&w=2 technical
- http://marc.info/?l=bugtraq&m=107540163908129&w=2 technical
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:112 technical
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13929 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855 technical
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866 technical
- https://nvd.nist.gov/vuln/detail/CVE-2003-0977 advisory
- http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1 url