sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

[SM-Discuss] Security Vulnerability in cvs version 1.11.4 and lower!

From: Arwed von Merkatz <v.merkatz AT gmx.net>
To: sm-discuss AT lists.ibiblio.org
Cc: "Julian v. Bock" <julian AT OpenIT.DE>
Subject: [SM-Discuss] Security Vulnerability in cvs version 1.11.4 and lower!
Date: Tue, 21 Jan 2003 14:43:47 +0100

Concurrent Versions System (CVS) is the dominant open-source version
control software that allows developers to access the latest code using
a network connection. CVS version 1.11.4 and below contain a flaw that
can be used by a remote attacker to execute arbitrary code on the
server.

http://security.e-matters.de/advisories/012003.html

-----

attached is the updated spell for cvs 1.11.5, please put it in the
devel grimoire asap.

Arwed
aka alley_cat

Attachment: cvs.tar.bz2
Description: Binary data

[SM-Discuss] Security Vulnerability in cvs version 1.11.4 and lower!, Arwed von Merkatz, 01/21/2003
- Re: [SM-Discuss] Security Vulnerability in cvs version 1.11.4 and lower!, Julian v. Bock, 01/21/2003