Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] Security Vulnerability in cvs version 1.11.4 and lower!

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Arwed von Merkatz <v.merkatz AT gmx.net>
  • To: sm-discuss AT lists.ibiblio.org
  • Cc: "Julian v. Bock" <julian AT OpenIT.DE>
  • Subject: [SM-Discuss] Security Vulnerability in cvs version 1.11.4 and lower!
  • Date: Tue, 21 Jan 2003 14:43:47 +0100

Concurrent Versions System (CVS) is the dominant open-source version
control software that allows developers to access the latest code using
a network connection. CVS version 1.11.4 and below contain a flaw that
can be used by a remote attacker to execute arbitrary code on the
server.

http://security.e-matters.de/advisories/012003.html

-----

attached is the updated spell for cvs 1.11.5, please put it in the
devel grimoire asap.



Arwed
aka alley_cat

Attachment: cvs.tar.bz2
Description: Binary data




Archive powered by MHonArc 2.6.24.

Top of Page