CVE-2000-0679: Low severity cvs cvs vulnerability
Published Oct 20, 2000
·Updated
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.
Affected Software
1 affected component
CVS CVS=1.10.8
Event History
Oct 20, 2000
CVE Published
04:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0679?
CVE-2000-0679 is classified as a moderate severity vulnerability that allows arbitrary file creation by exploiting client-server trust issues.
2
How do I fix CVE-2000-0679?
To fix CVE-2000-0679, users should upgrade to a later version of CVS that does not have this vulnerability.
3
What software is affected by CVE-2000-0679?
CVE-2000-0679 specifically affects CVS version 1.10.8.
4
What is the impact of CVE-2000-0679?
The impact of CVE-2000-0679 allows malicious CVS servers to direct clients to create arbitrary files, potentially leading to information disclosure or further exploitation.
5
Is there a workaround for CVE-2000-0679?
There are no known workarounds for CVE-2000-0679; upgrading to a secure version of CVS is the recommended action.