VULNERABILITY INTELLIGENCE

CVE-2004-0417

CVSS score5 MEDIUM
EPSS probability3.07%
CISA KEVNot currently listed
Published2004-08-06
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.

Primary references