Description
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Michal Szymanski · perldoslinux
https://www.exploit-db.com/exploits/19870
Scores
CVSS v3
5.5
EPSS
0.0125
EPSS Percentile
79.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-667
Status
published
Products (1)
concurrent_versions_software_project/concurrent_versions_software
Published
Apr 23, 2000
Tracked Since
Feb 18, 2026