[cvsnt] Which version of CVS is CVSNT 2.0.12 based on?

Anne Bonham abonham at gnx.com
Wed May 19 21:04:41 BST 2004


Which version of CVS is CVSNT 2.0.12 based on?

I received this security alert today and am not sure if it impacts us or not
(we're using the CVSNT server version 2.0.12 and WinCVS clients):

 Advisory: CVS remote vulnerability
 Release Date: 2004/05/19
Last Modified: 2004/05/19
       Author: Stefan Esser [s.esser at e-matters.de]

  Application: CVS feature release <= 1.12.7
               CVS stable release  <= 1.11.15
     Severity: A vulnerability within CVS allows remote compromise of
               CVS servers.
         Risk: Critical
Vendor Status: Vendor is releasing a bugfixed version.
    Reference: http://security.e-matters.de/advisories/072004.html

Anne,
Release Manager, GNX




More information about the cvsnt mailing list