Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.53041
Category:Conectiva Local Security Checks
Title:Conectiva Security Advisory CLA-2005:966 (cvs)
Summary:NOSUMMARY
Description:Description:

The remote host is missing updates announced in
advisory CLA-2005:966.

A buffer overflow exists in the processing of
version and author information in the cvs client
which allows a malicous cvs server to execute
arbitrary code on the system.

Solution:
The apt tool can be used to perform RPM package upgrades
by running 'apt-get update' followed by 'apt-get upgrade'

http://www.cvshome.org
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000966

Risk factor : High

CVSS Score:
7.5

Cross-Ref: BugTraq ID: 13217
Common Vulnerability Exposure (CVE) ID: CVE-2005-0753
14976
http://secunia.com/advisories/14976/
DSA-742
http://www.debian.org/security/2005/dsa-742
GLSA-200504-16
http://www.gentoo.org/security/en/glsa/glsa-200504-16.xml
RHSA-2005:387
http://www.redhat.com/support/errata/RHSA-2005-387.html
SUSE-SA:2005:024
http://www.novell.com/linux/security/advisories/2005_24_cvs.html
cvs-bo(20148)
https://exchange.xforce.ibmcloud.com/vulnerabilities/20148
http://bugs.gentoo.org/attachment.cgi?id=54352&action=view
oval:org.mitre.oval:def:9688
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9688
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.