CVE-2000-0680 | BDVDB-2026-1378 Detail

Description#

The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org
http://www.securityfocus.com/bid/1524

Exploit#

No public exploit known

History#

Version 12000-09-21Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.