CVE-2003-0977
Published Jan 5, 2004
Last updated 7 years ago
Overview
- Description
- CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62135DD0-140D-42C2-9302-31B5E2DE1A4A"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37B53C85-AA0E-40DD-B477-058586197714"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D472B97-F7C2-4973-9D71-AB3CF1F8774D"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D0DCF26-59A8-46AC-99D7-97C203A0D702"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B31BAACA-7518-48D2-ADEE-F59F4569D3BF"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D2748A8-5047-4338-A08E-986497AE4B1C"
},
{
"criteria": "cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "525C4E91-2186-4D3A-9DF0-1C6A75A3F919"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57F41B40-75E6-45C8-A5FB-8464C0B2D064"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "300A6A65-05FD-401C-80F6-B5F5B1F056E0"
},
{
"criteria": "cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA3D53C9-3806-45E6-8AE9-7D41280EF64C"
}
],
"operator": "OR"
}
]
}
]