Read the docs
TI-2005-00697 Aliases CVE-2005-0753GHSA-m73f-6chm-3m86

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Priority MEDIUM 40Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Why it matters now

EPSS 0.04745 91st percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPEVersionsRoleVendor
cpe:2.3:a:cvs:cvs:1.10:*:*:*:*:*:*:*1.10VulnerableCvs
cpe:2.3:a:cvs:cvs:1.10.6:*:*:*:*:*:*:*1.10.6VulnerableCvs
cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*1.10.7VulnerableCvs
cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*1.10.8VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*1.11VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*1.11.1VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*1.11.1_p1VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*1.11.2VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*1.11.3VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*1.11.4VulnerableCvs
  • cpe:2.3:a:cvs:cvs:1.10:*:*:*:*:*:*:* Versions 1.10 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.10.6:*:*:*:*:*:*:* Versions 1.10.6 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:* Versions 1.10.7 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:* Versions 1.10.8 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:* Versions 1.11.1 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:* Versions 1.11.1_p1 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:* Versions 1.11.2 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:* Versions 1.11.3 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:* Versions 1.11.4 Vulnerable ·Cvs
Show 7 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*1.11.5VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*1.11.6VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*1.11.10VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*1.11.11VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*1.11.14VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*1.11.15VulnerableCvs
cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*1.11.16VulnerableCvs
  • cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:* Versions 1.11.5 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:* Versions 1.11.6 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:* Versions 1.11.10 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:* Versions 1.11.11 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:* Versions 1.11.14 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:* Versions 1.11.15 Vulnerable ·Cvs
  • cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:* Versions 1.11.16 Vulnerable ·Cvs

Remediation

Red Hat 1 advisory

  • RHSA-2005:387 Released 2005-04-25 · Red Hat rating Moderate
    cvs security update
    • Red Hat Desktop version 3 cvs-1.11.2-27, cvs-1.11.2-27.i386
    • Red Hat Enterprise Linux AS version 3 cvs-1.11.2-27, cvs-1.11.2-27.i386, cvs-1.11.2-27.ia64 +1
    • Red Hat Enterprise Linux AS version 4 cvs-1.11.17-7.RHEL4, cvs-1.11.17-7.RHEL4.i386, cvs-1.11.17-7.RHEL4.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 cvs-1.11.17-7.RHEL4, cvs-1.11.17-7.RHEL4.i386
    • Red Hat Enterprise Linux ES version 3 cvs-1.11.2-27, cvs-1.11.2-27.i386, cvs-1.11.2-27.ia64
    • Red Hat Enterprise Linux ES version 4 cvs-1.11.17-7.RHEL4, cvs-1.11.17-7.RHEL4.i386, cvs-1.11.17-7.RHEL4.ia64
    • Red Hat Enterprise Linux WS version 3 cvs-1.11.2-27, cvs-1.11.2-27.i386, cvs-1.11.2-27.ia64
    • Red Hat Enterprise Linux WS version 4 cvs-1.11.17-7.RHEL4, cvs-1.11.17-7.RHEL4.i386, cvs-1.11.17-7.RHEL4.ia64

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2005:387
Red Hat Enterprise Linux AS version 3Fixed RHSA-2005:387
Red Hat Enterprise Linux AS version 4Fixed RHSA-2005:387
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2005:387
Red Hat Enterprise Linux ES version 3Fixed RHSA-2005:387
Red Hat Enterprise Linux ES version 4Fixed RHSA-2005:387
Red Hat Enterprise Linux WS version 3Fixed RHSA-2005:387
Red Hat Enterprise Linux WS version 4Fixed RHSA-2005:387

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0753
  2. 2026-10-03 Alias added: GHSA-m73f-6chm-3m86

References

Patch 3

Advisory 2

Other 1

  • TI-2004-00362 Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when… CVSS 2.0HIGH 7.5
  • TI-2004-00380 Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8… CVSS 2.0HIGH 10.0
  • TI-2012-00741 Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and… CVSS 2.0HIGH 10.0
  • TI-2003-00012 Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a… CVSS 2.0HIGH 7.5
  • TI-2004-00382 serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly… CVSS 2.0HIGH 10.0
  • TI-2004-00378 CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed… CVSS 2.0HIGH 10.0
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences