CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.

CVSS v2.0

7.1 HIGHAV:N/AC:H/Au:S/C:C/I:C/A:C

EPSS

7.72% chance of exploitation in the next 30 days, 94th percentile

Published

2005-02-13

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24182

References

• CVE Record
• NVD entry

Related

• CVE-2004-1470
• CVE-2004-1475
• CVE-2004-1467
• CVE-2004-1484
• CVE-2004-1466
• CVE-2004-1488