7.1

CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cvs ≫ Cvs Version 1.10.7
Cvs ≫ Cvs Version 1.10.8
Cvs ≫ Cvs Version 1.11
Cvs ≫ Cvs Version 1.11.1
Cvs ≫ Cvs Version 1.11.1_p1
Cvs ≫ Cvs Version 1.11.2
Cvs ≫ Cvs Version 1.11.3
Cvs ≫ Cvs Version 1.11.4
Cvs ≫ Cvs Version 1.11.5
Cvs ≫ Cvs Version 1.11.6
Cvs ≫ Cvs Version 1.11.10
Cvs ≫ Cvs Version 1.11.11
Cvs ≫ Cvs Version 1.11.14
Cvs ≫ Cvs Version 1.11.15
Cvs ≫ Cvs Version 1.11.16
Cvs ≫ Cvs Version 1.12.1
Cvs ≫ Cvs Version 1.12.2
Cvs ≫ Cvs Version 1.12.5
Cvs ≫ Cvs Version 1.12.7
Cvs ≫ Cvs Version 1.12.8
Openpkg ≫ Openpkg Version 1.3
Openpkg ≫ Openpkg Version 2.0
Openpkg ≫ Openpkg Version current
Sgi ≫ Propack Version 2.4
Sgi ≫ Propack Version 3.0
Freebsd ≫ Freebsd Version 1.1.5.1
Freebsd ≫ Freebsd Version 2.0
Freebsd ≫ Freebsd Version 2.0.5
Freebsd ≫ Freebsd Version 2.1.0
Freebsd ≫ Freebsd Version 2.1.5
Freebsd ≫ Freebsd Version 2.1.6
Freebsd ≫ Freebsd Version 2.1.6.1
Freebsd ≫ Freebsd Version 2.1.7.1
Freebsd ≫ Freebsd Version 2.2
Freebsd ≫ Freebsd Version 2.2.2
Freebsd ≫ Freebsd Version 2.2.3
Freebsd ≫ Freebsd Version 2.2.4
Freebsd ≫ Freebsd Version 2.2.5
Freebsd ≫ Freebsd Version 2.2.6
Freebsd ≫ Freebsd Version 2.2.8
Freebsd ≫ Freebsd Version 3.0
Freebsd ≫ Freebsd Version 3.0 Update releng
Freebsd ≫ Freebsd Version 3.1
Freebsd ≫ Freebsd Version 3.2
Freebsd ≫ Freebsd Version 3.3
Freebsd ≫ Freebsd Version 3.4
Freebsd ≫ Freebsd Version 3.5
Freebsd ≫ Freebsd Version 3.5 Update stable
Freebsd ≫ Freebsd Version 3.5.1
Freebsd ≫ Freebsd Version 3.5.1 Update release
Freebsd ≫ Freebsd Version 3.5.1 Update stable
Freebsd ≫ Freebsd Version 4.0
Freebsd ≫ Freebsd Version 4.0 Update alpha
Freebsd ≫ Freebsd Version 4.0 Update releng
Freebsd ≫ Freebsd Version 4.1
Freebsd ≫ Freebsd Version 4.1.1
Freebsd ≫ Freebsd Version 4.1.1 Update release
Freebsd ≫ Freebsd Version 4.1.1 Update stable
Freebsd ≫ Freebsd Version 4.2
Freebsd ≫ Freebsd Version 4.2 Update stable
Freebsd ≫ Freebsd Version 4.3
Freebsd ≫ Freebsd Version 4.3 Update release
Freebsd ≫ Freebsd Version 4.3 Update release_p38
Freebsd ≫ Freebsd Version 4.3 Update releng
Freebsd ≫ Freebsd Version 4.3 Update stable
Freebsd ≫ Freebsd Version 4.4
Freebsd ≫ Freebsd Version 4.4 Update release_p42
Freebsd ≫ Freebsd Version 4.4 Update releng
Freebsd ≫ Freebsd Version 4.4 Update stable
Freebsd ≫ Freebsd Version 4.5
Freebsd ≫ Freebsd Version 4.5 Update release
Freebsd ≫ Freebsd Version 4.5 Update release_p32
Freebsd ≫ Freebsd Version 4.5 Update releng
Freebsd ≫ Freebsd Version 4.5 Update stable
Freebsd ≫ Freebsd Version 4.6
Freebsd ≫ Freebsd Version 4.6 Update release
Freebsd ≫ Freebsd Version 4.6 Update release_p20
Freebsd ≫ Freebsd Version 4.6 Update releng
Freebsd ≫ Freebsd Version 4.6 Update stable
Freebsd ≫ Freebsd Version 4.6.2
Freebsd ≫ Freebsd Version 4.7
Freebsd ≫ Freebsd Version 4.7 Update release
Freebsd ≫ Freebsd Version 4.7 Update release_p17
Freebsd ≫ Freebsd Version 4.7 Update releng
Freebsd ≫ Freebsd Version 4.7 Update stable
Freebsd ≫ Freebsd Version 4.8
Freebsd ≫ Freebsd Version 4.8 Update pre-release
Freebsd ≫ Freebsd Version 4.8 Update release_p6
Freebsd ≫ Freebsd Version 4.8 Update releng
Freebsd ≫ Freebsd Version 4.9
Freebsd ≫ Freebsd Version 4.9 Update pre-release
Freebsd ≫ Freebsd Version 4.9 Update releng
Freebsd ≫ Freebsd Version 4.10
Freebsd ≫ Freebsd Version 4.10 Update release
Freebsd ≫ Freebsd Version 4.10 Update releng
Freebsd ≫ Freebsd Version 5.0
Freebsd ≫ Freebsd Version 5.0 Update alpha
Freebsd ≫ Freebsd Version 5.0 Update release_p14
Freebsd ≫ Freebsd Version 5.0 Update releng
Freebsd ≫ Freebsd Version 5.1
Freebsd ≫ Freebsd Version 5.1 Update alpha
Freebsd ≫ Freebsd Version 5.1 Update release
Freebsd ≫ Freebsd Version 5.1 Update release_p5
Freebsd ≫ Freebsd Version 5.1 Update releng
Freebsd ≫ Freebsd Version 5.2
Freebsd ≫ Freebsd Version 5.2.1 Update release
Freebsd ≫ Freebsd Version 5.2.1 Update releng
Gentoo ≫ Linux Version 1.4
Openbsd ≫ Openbsd Version 3.4
Openbsd ≫ Openbsd Version 3.5
Openbsd ≫ Openbsd Version current
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.72% 0.938
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 3.9 10
AV:N/AC:H/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
Vendor Advisory
http://security.e-matters.de/advisories/092004.html
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc
Vendor Advisory
http://www.securityfocus.com/bid/10499
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16365