5

CVE-2004-0417

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.

Data is provided by the National Vulnerability Database (NVD)
Cvs ≫ Cvs Version1.10.7
Cvs ≫ Cvs Version1.10.8
Cvs ≫ Cvs Version1.11
Cvs ≫ Cvs Version1.11.1
Cvs ≫ Cvs Version1.11.1_p1
Cvs ≫ Cvs Version1.11.2
Cvs ≫ Cvs Version1.11.3
Cvs ≫ Cvs Version1.11.4
Cvs ≫ Cvs Version1.11.5
Cvs ≫ Cvs Version1.11.6
Cvs ≫ Cvs Version1.11.10
Cvs ≫ Cvs Version1.11.11
Cvs ≫ Cvs Version1.11.14
Cvs ≫ Cvs Version1.11.15
Cvs ≫ Cvs Version1.11.16
Cvs ≫ Cvs Version1.12.1
Cvs ≫ Cvs Version1.12.2
Cvs ≫ Cvs Version1.12.5
Cvs ≫ Cvs Version1.12.7
Cvs ≫ Cvs Version1.12.8
Openpkg ≫ Openpkg Version1.3
Openpkg ≫ Openpkg Version2.0
Sgi ≫ Propack Version2.4
Sgi ≫ Propack Version3.0
Gentoo ≫ Linux Version1.4
Openbsd ≫ Openbsd Version3.4
Openbsd ≫ Openbsd Version3.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.49% 0.887
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P