Vulnerability Details : CVE-2003-0977
CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
Products affected by CVE-2003-0977
- cpe:2.3:o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*
- cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*
- cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-0977
1.90%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-0977
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2003-0977
-
http://www.mandriva.com/security/advisories?name=MDKSA-2003:112
Mandriva
-
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808
CONECTIVA | Análises dos Melhores Produtos Online (#10 Melhores)
-
http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1
Patch
-
http://marc.info/?l=bugtraq&m=107540163908129&w=2
'[FLSA-2004:1207] Updated cvs resolves security vulnerability' - MARC
-
http://www.debian.org/security/2004/dsa-422
Debian -- The Universal Operating SystemPatch;Vendor Advisory
-
ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
-
http://www.redhat.com/support/errata/RHSA-2004-003.html
Support
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528
404 Not Found
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855
404 Not Found
-
http://marc.info/?l=bugtraq&m=107168035515554&w=2
'[OpenPKG-SA-2003.052] OpenPKG Security Advisory (cvs)' - MARC
-
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/13929
CVS malformed module file manipulation CVE-2003-0977 Vulnerability Report
-
http://www.redhat.com/support/errata/RHSA-2004-004.html
Support
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866
404 Not Found
Jump to