CVE-2000-0338

Опубликовано: 23 апр. 2000

Источник: nvd

CVSS3: 5.5

CVSS2: 5

EPSS Низкий

Описание

Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.

Ссылки

http://www.securityfocus.com/bid/1136
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/1136
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:concurrent_versions_software_project:concurrent_versions_software:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01251

Низкий

5.5 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-667

Связанные уязвимости

GHSA-5fxq-3r3p-42m4