CVE

Id
8846  
CVE No.
CVE-2004-0418  
Status
Candidate  
Description
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.  
Phase
Assigned (20040416)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56219 8846 CVE-2004-0418 FULLDISC:20040609 Advisory 09/2004: More CVS remote vulnerabilities  View
56220 8846 CVE-2004-0418 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html  View
56221 8846 CVE-2004-0418 MISC:http://security.e-matters.de/advisories/092004.html  View
56222 8846 CVE-2004-0418 DEBIAN:DSA-519  View
56223 8846 CVE-2004-0418 URL:http://www.debian.org/security/2004/dsa-519  View
56224 8846 CVE-2004-0418 GENTOO:GLSA-200406-06  View
56225 8846 CVE-2004-0418 URL:http://security.gentoo.org/glsa/glsa-200406-06.xml  View
56226 8846 CVE-2004-0418 SUSE:SuSE-SA:2004:015  View
56227 8846 CVE-2004-0418 REDHAT:RHSA-2004:233  View
56228 8846 CVE-2004-0418 URL:http://www.redhat.com/support/errata/RHSA-2004-233.html  View
56229 8846 CVE-2004-0418 MANDRAKE:MDKSA-2004:058  View
56230 8846 CVE-2004-0418 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:058  View
56231 8846 CVE-2004-0418 SGI:20040604-01-U  View
56232 8846 CVE-2004-0418 URL:ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc  View
56233 8846 CVE-2004-0418 SGI:20040605-01-U  View
56234 8846 CVE-2004-0418 URL:ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc  View
56235 8846 CVE-2004-0418 BUGTRAQ:20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs)  View
56236 8846 CVE-2004-0418 URL:http://marc.info/?l=bugtraq&m=108716553923643&w=2  View
56237 8846 CVE-2004-0418 OVAL:oval:org.mitre.oval:def:1003  View
56238 8846 CVE-2004-0418 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1003  View
56239 8846 CVE-2004-0418 OVAL:oval:org.mitre.oval:def:11242  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62867 JVNDB-2004-000209 XFree86 の XDM におけるポートへのアクセス制限を回避される脆弱性 一部の Linux ディストリビューションに含まれている XFree86 パッケージの XDM には、設定ファイル上で DisplayManager.requestPort の値を "0" に設定している場合においても、"chooserFd" TCP ソケットが開かれてしまい、ネットワークを介した X クライアントからのアクセスを受けてしまう脆弱性が存在します。 CVE-2004-0419 8846 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000209.html  View