Description
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11145 ↗
- http://www.debian.org/security/2004/dsa-519 ↗
- http://security.e-matters.de/advisories/092004.html ↗
- http://marc.info/?l=bugtraq&m=108716553923643&w=2 ↗
- http://www.redhat.com/support/errata/RHSA-2004-233.html ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:058 ↗
- http://security.gentoo.org/glsa/glsa-200406-06.xml ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1001 ↗
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html ↗