CVE-2004-0418
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.
Affected Platforms (CPE)
📦
Cvs
Cvs
= 1.10.7📦
Cvs
Cvs
= 1.10.8📦
Cvs
Cvs
= 1.11📦
Cvs
Cvs
= 1.11.1📦
Cvs
Cvs
= 1.11.1_p1📦
Cvs
Cvs
= 1.11.2📦
Cvs
Cvs
= 1.11.3📦
Cvs
Cvs
= 1.11.4📦
Cvs
Cvs
= 1.11.5📦
Cvs
Cvs
= 1.11.6📦
Cvs
Cvs
= 1.11.10📦
Cvs
Cvs
= 1.11.11📦
Cvs
Cvs
= 1.11.14📦
Cvs
Cvs
= 1.11.15📦
Cvs
Cvs
= 1.11.16📦
Cvs
Cvs
= 1.12.1📦
Cvs
Cvs
= 1.12.2📦
Cvs
Cvs
= 1.12.5📦
Cvs
Cvs
= 1.12.7📦
Cvs
Cvs
= 1.12.8📦
Openpkg
Openpkg
All versions📦
Openpkg
Openpkg
= 1.3📦
Openpkg
Openpkg
= 2.0📦
Sgi
Propack
= 2.4📦
Sgi
Propack
= 3.0💻
Gentoo
Linux
= 1.4💻
Openbsd
Openbsd
All versions💻
Openbsd
Openbsd
= 3.4💻
Openbsd