Back to Database
Status published
High
CVE-2003-0015
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers...
Vulnerability Description
Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0015
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.redhat.com/support/errata/RHSA-2003-012.html
- http://ccvs.cvshome.org/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14
- http://marc.info/?l=bugtraq&m=104342550612736&w=2
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:009
- http://marc.info/?l=bugtraq&m=104438807203491&w=2
- http://www.securityfocus.com/bid/6650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11108
- http://marc.info/?l=bugtraq&m=104333092200589&w=2
- http://rhn.redhat.com/errata/RHSA-2003-013.html
- http://marc.info/?l=bugtraq&m=104428571204468&w=2
- http://www.debian.org/security/2003/dsa-233
- http://www.kb.cert.org/vuls/id/650937
- http://security.e-matters.de/advisories/012003.html
- http://www.cert.org/advisories/CA-2003-02.html
- http://www.ciac.org/ciac/bulletins/n-032.shtml
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.html
More from freebsd
View All →CVE-2022-32264
sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability...
Unknown
0
CVE-2021-36159
libfetch before 2021-07-26, as used in apk-tools, xbps, and other...
Critical
9.1
CVE-2020-24718
bhyve, as used in FreeBSD through 12.1 and illumos (e.g.,...
High
8.2
CVE-2020-10566
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12,...
High
7.8
CVE-2020-10565
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12,...
High
7.8
Affected Vendor
freebsd
View all reports →Affected Software
freebsd, cvs
Vulnerable Versions:
4.4, 4.5, 4.6, 4.7, 5.0, 1.10.7, 1.10.8, 1.11, 1.11.1, 1.11.1p1, 1.11.2, 1.11.3, 1.11.4
Timeline
Official Publish:
September 1st, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.