CVE-2004-0396: Buffer Overflow
Published May 20, 2004
·Updated
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
Affected Software
2 affected components
CVS CVS=1.11
CVS CVS=1.12
Remediation
Patch Available
Patch Available
Patch Available
Event History
May 20, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0396?
CVE-2004-0396 is rated as high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2004-0396?
To fix CVE-2004-0396, upgrade CVS to versions 1.11.16 or higher, or 1.12.8 or higher.
3
What systems are affected by CVE-2004-0396?
CVEs 1.11.x up to 1.11.15 and 1.12.x up to 1.12.7 are affected by CVE-2004-0396.
4
What is the nature of the vulnerability in CVE-2004-0396?
CVE-2004-0396 is a heap-based buffer overflow vulnerability in the CVS client.
5
Can CVE-2004-0396 be exploited remotely?
Yes, CVE-2004-0396 can be exploited remotely through the pserver mechanism.