CVE-2004-0180

Published: 1 June 2004

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0180
• NVD
• Launchpad
• Debian