VYPR
Unrated severityNVD Advisory· Published Jun 14, 2004· Updated Apr 16, 2026

CVE-2004-0396

CVE-2004-0396

Description

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

Affected products

2
  • Cvs/Cvs2 versions
    cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:cvs:cvs:1.12:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

28

News mentions

0

No linked articles in our index yet.