OSVDB ID: 6305 Title: CVS pserver Line Entry Handling Remote Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
A remote overflow exists in CVS. The issue is due to a boundary error within the handling of modified or unchanged flag insertion into CVS entry lines, resulting in a heap overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public, Exploit Commercial Disclosure: OSVDB Verified |
Solution |
Upgrade to version 1.12.8 (feature release) or 1.11.16 (stable release) or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
Credit |
|
hardened-php.net - www.hardened-php.net