Back to search
CVE-2000-0670
Published: Oct 13, 2000
Modified: Aug 8, 2024
PUBLISHED
Description
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
TLSA2000016-1
vendor-advisory
x_refsource_TURBO
20000712 cvsweb: remote shell for cvs committers
mailing-list
x_refsource_BUGTRAQ
cvsweb-shell-access(4925)
vdb-entry
x_refsource_XF
1469
vdb-entry
x_refsource_BID
20000714 MDKSA-2000:019 cvsweb update
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now