Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-09-01T04:00:00

Updated: 2024-08-08T01:36:25.368Z

Reserved: 2003-01-07T00:00:00

Link: CVE-2003-0015

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2003-02-07T05:00:00.000

Modified: 2024-11-20T23:43:44.333

Link: CVE-2003-0015

cve-icon Redhat

Severity : Critical

Publid Date: 2003-01-20T00:00:00Z

Links: CVE-2003-0015 - Bugzilla