CVEs-PoC/2004/CVE-2004-0396.md

CVE-2004-0396

Description

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

POC

Reference

• http://marc.info/?l=bugtraq&m=108498454829020&w=2
• http://security.e-matters.de/advisories/072004.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9058
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A970

Github

• https://github.com/ARPSyndicate/cve-scores