CVE-2004-0417 : Detail

CVE-2004-0417

88.59%V3
Network
2004-06-11
02h00 +00:00
2017-10-09
22h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Cvs>>Cvs >> Version 1.10.7

    Cvs>>Cvs >> Version 1.10.8

      Cvs>>Cvs >> Version 1.11

        Cvs>>Cvs >> Version 1.11.1

          Cvs>>Cvs >> Version 1.11.1_p1

            Cvs>>Cvs >> Version 1.11.2

              Cvs>>Cvs >> Version 1.11.3

                Cvs>>Cvs >> Version 1.11.4

                  Cvs>>Cvs >> Version 1.11.5

                    Cvs>>Cvs >> Version 1.11.6

                      Cvs>>Cvs >> Version 1.11.10

                        Cvs>>Cvs >> Version 1.11.11

                          Cvs>>Cvs >> Version 1.11.14

                            Cvs>>Cvs >> Version 1.11.15

                              Cvs>>Cvs >> Version 1.11.16

                                Cvs>>Cvs >> Version 1.12.1

                                  Cvs>>Cvs >> Version 1.12.2

                                    Cvs>>Cvs >> Version 1.12.5

                                      Cvs>>Cvs >> Version 1.12.7

                                        Cvs>>Cvs >> Version 1.12.8

                                          Openpkg>>Openpkg >> Version *

                                          Openpkg>>Openpkg >> Version 1.3

                                          Openpkg>>Openpkg >> Version 2.0

                                          Sgi>>Propack >> Version 2.4

                                          Sgi>>Propack >> Version 3.0

                                          Configuraton 0

                                          Gentoo>>Linux >> Version 1.4

                                          Openbsd>>Openbsd >> Version *

                                          Openbsd>>Openbsd >> Version 3.4

                                          Openbsd>>Openbsd >> Version 3.5

                                          References

                                          http://www.debian.org/security/2004/dsa-519
                                          Tags : vendor-advisory, x_refsource_DEBIAN
                                          http://marc.info/?l=bugtraq&m=108716553923643&w=2
                                          Tags : mailing-list, x_refsource_BUGTRAQ
                                          http://www.redhat.com/support/errata/RHSA-2004-233.html
                                          Tags : vendor-advisory, x_refsource_REDHAT
                                          http://www.mandriva.com/security/advisories?name=MDKSA-2004:058
                                          Tags : vendor-advisory, x_refsource_MANDRAKE
                                          http://security.gentoo.org/glsa/glsa-200406-06.xml
                                          Tags : vendor-advisory, x_refsource_GENTOO