CVE-2003-0015
Published Feb 7, 2003
Last updated 7 years ago
Overview
- Description
- Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-415
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55C5FC1A-1253-4390-A4FC-573BB14EA937"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44308D13-D935-4FF8-AB52-F0E115ED1AD2"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C001822-FDF8-497C-AC2C-B59A00E9ACD2"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B86C77AB-B8FF-4376-9B4E-C88417396F3D"
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62135DD0-140D-42C2-9302-31B5E2DE1A4A"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37B53C85-AA0E-40DD-B477-058586197714"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.1p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEA5C320-0306-4A15-9AB0-4DCD01F103DF"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D472B97-F7C2-4973-9D71-AB3CF1F8774D"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D0DCF26-59A8-46AC-99D7-97C203A0D702"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B31BAACA-7518-48D2-ADEE-F59F4569D3BF"
}
],
"operator": "OR"
}
]
}
]