Red Hat Security AdvisoryRHSA-2012:0321
cvs security update
Released 2012-02-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cvs-1.11.22-11.el5_8.1, cvs-1.11.22-11.el5_8.1.i386, cvs-1.11.22-11.el5_8.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) cvs-1.11.22-11.el5_8.1, cvs-1.11.22-11.el5_8.1.i386, cvs-inetd-1.11.22-11.el5_8.1 +1
- Red Hat Enterprise Linux Desktop (v. 6) cvs-1.11.23-11.el6_2.1
- Red Hat Enterprise Linux HPC Node (v. 6) cvs-1.11.23-11.el6_2.1
- Red Hat Enterprise Linux Server (v. 6) cvs-1.11.23-11.el6_2.1
- Red Hat Enterprise Linux Workstation (v. 6) cvs-1.11.23-11.el6_2.1
Fixes 1 record
Priority MEDIUM 54
Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP r…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0837 · Published 2012-05-29 · Fixed CWE-119
