CVE-2004-1471
published 2004-12-31CVE-2004-1471: Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a…
PriorityP432high7.1CVSS 2.0
AVNACHAuSCCICAC
EXPLOIT
EPSS
7.72%
93.9th percentile
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | — | — |
| cvs | cvs | >= 0 < 1:1.12.9 | 1:1.12.9 |
| cvs | cvs | >= 0 < 1:1.12.9 | 1:1.12.9 |
| cvs | cvs | >= 0 < 1:1.12.9 | 1:1.12.9 |
| cvs | cvs | >= 0 < 1:1.12.9 | 1:1.12.9 |
| debian | cvs | < cvs 1:1.12.9 (bookworm) | cvs 1:1.12.9 (bookworm) |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:H/Au:S/C:C/I:C/A:C
osv7.1HIGH
vendor_debian7.1HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mpm3-c55x-2wp9: Format string vulnerability in wrapper
ghsa_unreviewed·2022-05-03
CVE-2004-1471 [HIGH] GHSA-mpm3-c55x-2wp9: Format string vulnerability in wrapper
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
OSV
CVE-2004-1471: Format string vulnerability in wrapper
osv·2004-12-31·CVSS 7.1
CVE-2004-1471 [HIGH] CVE-2004-1471: Format string vulnerability in wrapper
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Debian
CVE-2004-1471: cvs - Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11....
vendor_debian·2004·CVSS 7.1
CVE-2004-1471 [HIGH] CVE-2004-1471: cvs - Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11....
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Scope: local
bookworm: resolved (fixed in 1:1.12.9)
bullseye: resolved (fixed in 1:1.12.9)
forky: resolved (fixed in 1:1.12.9)
sid: resolved (fixed in 1:1.12.9)
trixie: resolved (fixed in 1:1.12.9)
No detection rules found.
No writeups or analysis indexed.
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.aschttp://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.htmlhttp://security.e-matters.de/advisories/092004.htmlhttp://www.securityfocus.com/bid/10499https://exchange.xforce.ibmcloud.com/vulnerabilities/16365ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.aschttp://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.htmlhttp://security.e-matters.de/advisories/092004.htmlhttp://www.securityfocus.com/bid/10499https://exchange.xforce.ibmcloud.com/vulnerabilities/16365
2004-12-31
Published