VDB
CVE-2004-0396
CVE-2004-0396
PUBLISHED
CVSS 7.5 HIGH
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
EPSS 67.52% · 99.2th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
67.52%
99.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cvs | cvs | 1.12, 1.11 |
| n/a | n/a | n/a |
Timeline
- May 20, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- 11652 third-party-advisory
- MDKSA-2004:048 vendor-advisory
- GLSA-200405-12 vendor-advisory
- TA04-147A third-party-advisory
- FEDORA-2004-1620 vendor-advisory
- DSA-505 vendor-advisory
- cvs-entry-line-bo(16193) vdb
- SSA:2004-140-01 vendor-advisory
- NetBSD-SA2004-008 vendor-advisory
- 11641 third-party-advisory
- 20040519 Advisory 07/2004: CVS remote vulnerability mailing-list
- 20040520 cvs server buffer overflow vulnerability vendor-advisory
- FreeBSD-SA-04:10 vendor-advisory
- 6305 vdb
- 20040519 Advisory 07/2004: CVS remote vulnerability mailing-list
- SuSE-SA:2004:013 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2004-0396 advisory
- http://marc.info/?l=bugtraq&m=108500040719512&w=2 url
- http://security.e-matters.de/advisories/072004.html url
- http://www.ciac.org/ciac/bulletins/o-147.shtml url
…and 9 more