Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CVS Server远程信息泄露漏洞
Vulnerability Description
Concurrent Versions System (CVS)是一款开放源代码的版本控制软件。 CVS服务器在接收来自客户端的相对路径名处理时存在问题,远程攻击者可以利用这个漏洞查看服务器上部分文件内容。 当CVS服务器在接收客户端提供的包含'../'字符的相对路径名时,可绕过CVS ROOT目录,查看系统中部分文件内容。
CVSS Information
N/A
Vulnerability Type
N/A