LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

PostgreSQL 9.3 beta: Federated databases and more

LWN.net Weekly Edition for May 9, 2013

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

cvs: remote code execution

Package(s):cvs CVE #(s):CVE-2012-0804
Created:February 9, 2012 Updated:March 29, 2012
Description:

From the Debian advisory:

It was discovered that a malicious CVS server could cause a heap overflow in the CVS client, potentially allowing the server to execute arbitrary code on the client.

Alerts:
Debian DSA-2407-1 2012-02-09
Fedora FEDORA-2012-1383 2012-02-15
Fedora FEDORA-2012-1400 2012-02-15
Ubuntu USN-1371-1 2012-02-22
CentOS CESA-2012:0321 2012-02-22
Oracle ELSA-2012-0321 2012-02-21
Red Hat RHSA-2012:0321-01 2012-02-21
openSUSE openSUSE-SU-2012:0310-1 2012-02-27
Scientific Linux SL-cvs-20120306 2012-03-06
Oracle ELSA-2012-0321 2012-03-09
Mandriva MDVSA-2012:044 2012-03-29
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds