CVE-2004-0396

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

67.53% chance of exploitation in the next 30 days, 99th percentile

Published

2004-05-20

Updated

2024-08-08

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/301
• https://www.exploit-db.com/exploits/300

Security advisories

• http://www.debian.org/security/2004/dsa-505
• http://www.redhat.com/support/errata/RHSA-2004-190.html
• http://www.kb.cert.org/vuls/id/192038
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:048
• http://www.securityfocus.com/bid/10384

References

• CVE Record
• NVD entry