GNU CVS (Concurrent Versions System) 1.12.7

CPE Details

GNU CVS (Concurrent Versions System) 1.12.7
gnu
cvs
1.12.7
2017-09-07
18h00 +00:00
2017-09-07
18h00 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:gnu:cvs:1.12.7:*:*:*:*:*:*:*

Informations

Vendor

gnu

Product

cvs

Version

1.12.7

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2017-12836 2017-08-24 12h00 +00:00 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
7.5
High
CVE-2004-0778 2004-08-18 02h00 +00:00 CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
5