CVE-2004-0405: Medium severity cvs cvs vulnerability
Published Apr 17, 2004
·Updated
CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.
Affected Software
1 affected component
CVS CVS<=1.10
Remediation
Patch Available
Event History
Apr 17, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0405?
CVE-2004-0405 is considered a moderate severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2004-0405?
To fix CVE-2004-0405, update CVS to version 1.11 or later.
3
What impact does CVE-2004-0405 have on CVS users?
CVE-2004-0405 allows CVS clients to exploit directory traversal vulnerabilities to read arbitrary files on the server.
4
Which versions of CVS are affected by CVE-2004-0405?
CVS versions prior to 1.11 are affected by CVE-2004-0405.
5
Is there a workaround for CVE-2004-0405?
A potential workaround for CVE-2004-0405 is to restrict access to the CVS repository to trusted users.