Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.52976
Category:Turbolinux Local Security Tests
Title:Turbolinux TLSA-2003-69 (cvs)
Summary:NOSUMMARY
Description:Description:

The remote host is missing an update to cvs
announced via advisory TLSA-2003-69.

CVS is a front end to the rcs(1) revision control system which extends
the notion of revision control from a collection of files in a single
directory to a hierarchical collection of directories consisting of
revision controlled files.
A remote user can submit a specially crafted and malformed module
request that may cause the CVS server to attempt to create directories
and possibly files at the root of the filesystem where the CVS
repository is located.

This vulnerability may allow attackers to cause the CVS server to create directories and files
in the file system root directory.

Solution: Please use the turbopkg (zabom) tool to apply the update.
http://www.securityspace.com/smysecure/catid.html?in=TLSA-2003-69

Risk factor : High

CVSS Score:
7.5

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2003-0977
Bugtraq: 20031217 [OpenPKG-SA-2003.052] OpenPKG Security Advisory (cvs) (Google Search)
http://marc.info/?l=bugtraq&m=107168035515554&w=2
Bugtraq: 20040129 [FLSA-2004:1207] Updated cvs resolves security vulnerability (Google Search)
http://marc.info/?l=bugtraq&m=107540163908129&w=2
Conectiva Linux advisory: CLA-2004:808
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808
Debian Security Information: DSA-422 (Google Search)
http://www.debian.org/security/2004/dsa-422
http://www.mandriva.com/security/advisories?name=MDKSA-2003:112
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866
http://www.redhat.com/support/errata/RHSA-2004-003.html
http://www.redhat.com/support/errata/RHSA-2004-004.html
http://secunia.com/advisories/10601
SGI Security Advisory: 20040103-01-U
ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
SGI Security Advisory: 20040202-01-U
ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc
XForce ISS Database: cvs-module-file-manipulation(13929)
https://exchange.xforce.ibmcloud.com/vulnerabilities/13929
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.