CVE-2004-0180: Low severity cvs cvs vulnerability
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0180?
CVE-2004-0180 is considered a high-severity vulnerability due to its potential for arbitrary file creation on the client system.
How do I fix CVE-2004-0180?
To fix CVE-2004-0180, upgrade to CVS version 1.11 or later, which mitigates the vulnerability.
What systems are affected by CVE-2004-0180?
CVE-2004-0180 affects CVS versions prior to 1.11, specifically those that are vulnerable to malicious RCS diff files.
How does CVE-2004-0180 exploit work?
CVE-2004-0180 exploits the CVS client by allowing a malicious CVS server to specify absolute pathnames in RCS diff files, leading to arbitrary file creation.
Is CVE-2004-0180 still a concern today?
While CVE-2004-0180 is an older vulnerability, it remains a concern for legacy systems that have not been upgraded to secure versions.