Количество 9
Количество 9
CVE-2017-12836
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
CVE-2017-12836
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
CVE-2017-12836
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
CVE-2017-12836
CVS 1.12.x, when configured to use SSH for remote repositories, might ...
openSUSE-SU-2017:2483-1
Security update for cvs
SUSE-SU-2017:2422-1
Security update for cvs
SUSE-SU-2017:2419-1
Security update for cvs
GHSA-gw7c-p8cp-7935
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
BDU:2018-00109
Уязвимость централизованной системы контроля версиями CVS, связанная с неправильной обработкой данных при взаимодействии с удаленным репозиторием по протоколу SSH, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar." | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
 | CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar." | CVSS3: 5 | 4% Низкий | больше 8 лет назад |
 | CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar." | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
| CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might ... | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
 | openSUSE-SU-2017:2483-1 Security update for cvs | 4% Низкий | больше 8 лет назад | |
| SUSE-SU-2017:2422-1 Security update for cvs | 4% Низкий | больше 8 лет назад | |
| SUSE-SU-2017:2419-1 Security update for cvs | 4% Низкий | больше 8 лет назад | |
| GHSA-gw7c-p8cp-7935 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar." | CVSS3: 7.5 | 4% Низкий | больше 3 лет назад |
 | BDU:2018-00109 Уязвимость централизованной системы контроля версиями CVS, связанная с неправильной обработкой данных при взаимодействии с удаленным репозиторием по протоколу SSH, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.5 | 4% Низкий | больше 8 лет назад |
Уязвимостей на страницу