Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for cvs_suite by march-hare

    CVE-2010-1326 (GCVE-0-2010-1326)

    Vulnerability from nvd – Published: 2010-09-15 17:26 – Updated: 2024-09-16 22:29
    VLAI
    Summary
    perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.vupen.com/english/advisories/2010/2350 vdb-entryx_refsource_VUPEN
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884 x_refsource_CONFIRM
    http://www.debian.org/security/2010/dsa-2108 vendor-advisoryx_refsource_DEBIAN
    http://secunia.com/advisories/41358 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/41345 third-party-advisoryx_refsource_SECUNIA
    http://customer.march-hare.com/webtools/bugzilla/… x_refsource_MISC
    http://march-hare.com/cvspro/vuln.htm x_refsource_CONFIRM
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:21:18.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2010-2350",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2350"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884"
          },
          {
            "name": "DSA-2108",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2108"
          },
          {
            "name": "41358",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/41358"
          },
          {
            "name": "41345",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/41345"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://march-hare.com/cvspro/vuln.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-09-15T17:26:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2010-2350",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2350"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884"
        },
        {
          "name": "DSA-2108",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2108"
        },
        {
          "name": "41358",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/41358"
        },
        {
          "name": "41345",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/41345"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://march-hare.com/cvspro/vuln.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1326",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2010-2350",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/2350"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884"
            },
            {
              "name": "DSA-2108",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2108"
            },
            {
              "name": "41358",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/41358"
            },
            {
              "name": "41345",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/41345"
            },
            {
              "name": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view",
              "refsource": "MISC",
              "url": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view"
            },
            {
              "name": "http://march-hare.com/cvspro/vuln.htm",
              "refsource": "CONFIRM",
              "url": "http://march-hare.com/cvspro/vuln.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1326",
    "datePublished": "2010-09-15T17:26:00.000Z",
    "dateReserved": "2010-04-08T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:29:42.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2010-1326 (GCVE-0-2010-1326)

    Vulnerability from cvelistv5 – Published: 2010-09-15 17:26 – Updated: 2024-09-16 22:29
    VLAI
    Summary
    perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.vupen.com/english/advisories/2010/2350 vdb-entryx_refsource_VUPEN
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884 x_refsource_CONFIRM
    http://www.debian.org/security/2010/dsa-2108 vendor-advisoryx_refsource_DEBIAN
    http://secunia.com/advisories/41358 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/41345 third-party-advisoryx_refsource_SECUNIA
    http://customer.march-hare.com/webtools/bugzilla/… x_refsource_MISC
    http://march-hare.com/cvspro/vuln.htm x_refsource_CONFIRM
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T01:21:18.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2010-2350",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/2350"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884"
          },
          {
            "name": "DSA-2108",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-2108"
          },
          {
            "name": "41358",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/41358"
          },
          {
            "name": "41345",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/41345"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://march-hare.com/cvspro/vuln.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-09-15T17:26:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2010-2350",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/2350"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884"
        },
        {
          "name": "DSA-2108",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-2108"
        },
        {
          "name": "41358",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/41358"
        },
        {
          "name": "41345",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/41345"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://march-hare.com/cvspro/vuln.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-1326",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2010-2350",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/2350"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884"
            },
            {
              "name": "DSA-2108",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-2108"
            },
            {
              "name": "41358",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/41358"
            },
            {
              "name": "41345",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/41345"
            },
            {
              "name": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view",
              "refsource": "MISC",
              "url": "http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1\u0026id=1790\u0026action=view"
            },
            {
              "name": "http://march-hare.com/cvspro/vuln.htm",
              "refsource": "CONFIRM",
              "url": "http://march-hare.com/cvspro/vuln.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-1326",
    "datePublished": "2010-09-15T17:26:00.000Z",
    "dateReserved": "2010-04-08T00:00:00.000Z",
    "dateUpdated": "2024-09-16T22:29:42.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}