7.1

CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.

Data is provided by the National Vulnerability Database (NVD)
CvsCvs Version1.10.7
CvsCvs Version1.10.8
CvsCvs Version1.11
CvsCvs Version1.11.1
CvsCvs Version1.11.1_p1
CvsCvs Version1.11.2
CvsCvs Version1.11.3
CvsCvs Version1.11.4
CvsCvs Version1.11.5
CvsCvs Version1.11.6
CvsCvs Version1.11.10
CvsCvs Version1.11.11
CvsCvs Version1.11.14
CvsCvs Version1.11.15
CvsCvs Version1.11.16
CvsCvs Version1.12.1
CvsCvs Version1.12.2
CvsCvs Version1.12.5
CvsCvs Version1.12.7
CvsCvs Version1.12.8
OpenpkgOpenpkg Version1.3
OpenpkgOpenpkg Version2.0
OpenpkgOpenpkg Versioncurrent
SgiPropack Version2.4
SgiPropack Version3.0
FreebsdFreebsd Version1.1.5.1
FreebsdFreebsd Version2.0
FreebsdFreebsd Version2.0.5
FreebsdFreebsd Version2.1.0
FreebsdFreebsd Version2.1.5
FreebsdFreebsd Version2.1.6
FreebsdFreebsd Version2.1.6.1
FreebsdFreebsd Version2.1.7.1
FreebsdFreebsd Version2.2
FreebsdFreebsd Version2.2.2
FreebsdFreebsd Version2.2.3
FreebsdFreebsd Version2.2.4
FreebsdFreebsd Version2.2.5
FreebsdFreebsd Version2.2.6
FreebsdFreebsd Version2.2.8
FreebsdFreebsd Version3.0
FreebsdFreebsd Version3.0 Updatereleng
FreebsdFreebsd Version3.1
FreebsdFreebsd Version3.2
FreebsdFreebsd Version3.3
FreebsdFreebsd Version3.4
FreebsdFreebsd Version3.5
FreebsdFreebsd Version3.5 Updatestable
FreebsdFreebsd Version3.5.1
FreebsdFreebsd Version3.5.1 Updaterelease
FreebsdFreebsd Version3.5.1 Updatestable
FreebsdFreebsd Version4.0
FreebsdFreebsd Version4.0 Updatealpha
FreebsdFreebsd Version4.0 Updatereleng
FreebsdFreebsd Version4.1
FreebsdFreebsd Version4.1.1
FreebsdFreebsd Version4.1.1 Updaterelease
FreebsdFreebsd Version4.1.1 Updatestable
FreebsdFreebsd Version4.2
FreebsdFreebsd Version4.2 Updatestable
FreebsdFreebsd Version4.3
FreebsdFreebsd Version4.3 Updaterelease
FreebsdFreebsd Version4.3 Updaterelease_p38
FreebsdFreebsd Version4.3 Updatereleng
FreebsdFreebsd Version4.3 Updatestable
FreebsdFreebsd Version4.4
FreebsdFreebsd Version4.4 Updaterelease_p42
FreebsdFreebsd Version4.4 Updatereleng
FreebsdFreebsd Version4.4 Updatestable
FreebsdFreebsd Version4.5
FreebsdFreebsd Version4.5 Updaterelease
FreebsdFreebsd Version4.5 Updaterelease_p32
FreebsdFreebsd Version4.5 Updatereleng
FreebsdFreebsd Version4.5 Updatestable
FreebsdFreebsd Version4.6
FreebsdFreebsd Version4.6 Updaterelease
FreebsdFreebsd Version4.6 Updaterelease_p20
FreebsdFreebsd Version4.6 Updatereleng
FreebsdFreebsd Version4.6 Updatestable
FreebsdFreebsd Version4.6.2
FreebsdFreebsd Version4.7
FreebsdFreebsd Version4.7 Updaterelease
FreebsdFreebsd Version4.7 Updaterelease_p17
FreebsdFreebsd Version4.7 Updatereleng
FreebsdFreebsd Version4.7 Updatestable
FreebsdFreebsd Version4.8
FreebsdFreebsd Version4.8 Updatepre-release
FreebsdFreebsd Version4.8 Updaterelease_p6
FreebsdFreebsd Version4.8 Updatereleng
FreebsdFreebsd Version4.9
FreebsdFreebsd Version4.9 Updatepre-release
FreebsdFreebsd Version4.9 Updatereleng
FreebsdFreebsd Version4.10
FreebsdFreebsd Version4.10 Updaterelease
FreebsdFreebsd Version4.10 Updatereleng
FreebsdFreebsd Version5.0
FreebsdFreebsd Version5.0 Updatealpha
FreebsdFreebsd Version5.0 Updaterelease_p14
FreebsdFreebsd Version5.0 Updatereleng
FreebsdFreebsd Version5.1
FreebsdFreebsd Version5.1 Updatealpha
FreebsdFreebsd Version5.1 Updaterelease
FreebsdFreebsd Version5.1 Updaterelease_p5
FreebsdFreebsd Version5.1 Updatereleng
FreebsdFreebsd Version5.2
FreebsdFreebsd Version5.2.1 Updaterelease
FreebsdFreebsd Version5.2.1 Updatereleng
GentooLinux Version1.4
OpenbsdOpenbsd Version3.4
OpenbsdOpenbsd Version3.5
OpenbsdOpenbsd Versioncurrent
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.95% 0.897
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.1 3.9 10
AV:N/AC:H/Au:S/C:C/I:C/A:C