Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cvs | Cvs | 1.11 (including) | 1.11 (including) |
| Cvs | Cvs | 1.12 (including) | 1.12 (including) |
| Red Hat Enterprise Linux 3 | RedHat | cvs-0:1.11.2-22 | * |
| Cvs | Ubuntu | dapper | * |
| Cvs | Ubuntu | devel | * |
| Cvs | Ubuntu | edgy | * |
| Cvs | Ubuntu | feisty | * |