CVE-2004-0417
The MITRE CVE dictionary describes this issue as:
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
Find out more about CVE-2004-0417 from the MITRE CVE dictionary dictionary and NIST NVD.
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux 3 (cvs) | RHSA-2004:233 | 2004-06-09 |
| Red Hat Enterprise Linux 2.1 (cvs) | RHSA-2004:233 | 2004-06-09 |
Acknowledgements
Red Hat would like to thank Stefan Esser and Sebastian Krahmer for auditing, disclosing, and providing a patch for this issue.CVE description copyright © 2017, The MITRE Corporation