Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0015

high · 7.5

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.

7.5
CVSS
23.9%
EPSS (exploit prob.)
98th
EPSS percentile
2003-02-07
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-415

Affected products

VendorProductAffected versions
freebsdfreebsd4.4
freebsdfreebsd4.5
freebsdfreebsd4.6
freebsdfreebsd4.7
freebsdfreebsd5.0
cvscvs1.10.7
cvscvs1.10.8
cvscvs1.11
cvscvs1.11.1
cvscvs1.11.1p1
cvscvs1.11.2
cvscvs1.11.3
cvscvs1.11.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0015