CVE-2004-0416

Опубликовано: 06 авг. 2004

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*

cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*

cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*

cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*

cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*

cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*

cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*

cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.43031

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2004-0416

ubuntu

почти 21 год назад

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.

CVE-2004-0416

redhat

около 21 года назад

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.

CVE-2004-0416

debian

почти 21 год назад

Double free vulnerability for the error_prog_name string in CVS 1.12.x ...

GHSA-xrvc-m3hh-hp9h

github

около 3 лет назад

Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.

EPSS

Процентиль: 97%

0.43031

Средний

10 Critical

CVSS2

Дефекты

CWE-119