Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CVS wrapper.c远程格式串处理漏洞
Vulnerability Description
Concurrent Versions System (CVS)是一款开放源代码的版本控制软件。 CVS wrapper文件存在格式串问题，远程攻击者可以利用这个漏洞对CVS进行拒绝服务攻击或以进程权限在系统上执行任意指令。 CVS wrapper文件允许指定格式字符串，这些字符串在被CVS服务器接收后没有进行任何过滤检查，因此一项畸形wrapper行可使服务器崩溃或可能执行任意指令。不过此漏洞攻击者需要CVSROOT commit访问来触发，一般需要高访问级别。
CVSS Information
N/A
Vulnerability Type
N/A