Unrated severityNVD Advisory· Published Jun 1, 2004· Updated Jun 16, 2026

CVE-2004-0405

Description

CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nongnu/Cvs2 versions
cpe:2.3:a:cvs:cvs:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cvs:cvs:*:*:*:*:*:*:*:*range: <=1.10
- (no CPE)range: <1.11

Patches

Vulnerability mechanics

References

ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.ascnvdPatchVendor Advisory
patches.sgi.com/support/free/security/advisories/20040404-01-U.ascnvdPatchVendor Advisory
www.debian.org/security/2004/dsa-486nvdPatchVendor Advisory
marc.infonvd
security.gentoo.org/glsa/glsa-200404-13.xmlnvd
www.slackware.com/security/viewer.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/15891nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000