Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CVS Server全局环境变量远程拒绝服务攻击漏洞
Vulnerability Description
CVS Server是一个开放源码的,免费的软件,用于对源程序进行版本管理和发布,它可运行于Windows,Unix/Linux类操作系统下。 CVS 1.10.8以前的版本在处理环境变量时存在问题,远程攻击者可能利用此漏洞对CVS服务器实施拒绝服务攻击。 CVS存在一个编程错误,它没有正确地初始化一个全局环境变量。一个全局的jmp_buf变量没有被setjmp()初始化,因而其内容全是零,当程序代码调用longjmp()使用此jmp_buf时就会发生内存访问错误,从而导致服务器程序产生非预期的反应或使之
CVSS Information
N/A
Vulnerability Type
N/A