Vendor Dictionary: CVSTrac

CVSTrac

Short Name:	CVSTrac
Previous Names:	[None Entered]
URL:	http://www.cvstrac.org/ [visit link]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	http://www.cvstrac.org/cvstrac/ [visit link]
Notes:	[No Notes]
Full Details...

Vulnerabilities by Vendor Product

CVSTrac

CVSTrac

CVSTrac: 1.1.3; OSVDB ID: 8373 CVSTrac filediff Arbitrary Remote Code Execution; OSVDB ID: 8637 CVSTrac cgi.c vxprintf Function Precision Overflow; OSVDB ID: 8640 CVSTrac cgi.c Multiple Overflows; OSVDB ID: 8639 CVSTrac history.c history_update Function Overflow; OSVDB ID: 8645 CVSTrac Ticket Title Arbitrary Command Execution; OSVDB ID: 8646 CVSTrac Malformed URI Infinite Loop DoS; OSVDB ID: 8638 CVSTrac timeline.c timeline_page Function Overflow; 1.0.5; OSVDB ID: 8642 CVSTrac CVSROOT/passwd Arbitrary Account Deletion; OSVDB ID: 8641 CVSTrac Database Plaintext Password Storage; 1.1.0; OSVDB ID: 8644 CVSTrac Invalid Ticket DoS; OSVDB ID: 8643 CVSTrac chdir() chroot Jail Escape

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.