CVE-2000-0338
MEDIUMConcurrent Versions Software - Denial of Service via Predictable Lock File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0338. PoCs published by Michal Szymanski.
AI-analyzed exploit summary This Perl script exploits CVE-2000-0338 by pre-creating directories in /tmp with predictable names (cvs-serv followed by a PID) to deny service to CVS users. The attack leverages the world-writable nature of /tmp and CVS's predictable temporary directory naming scheme.
Description
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
Exploits (1)
This Perl script exploits CVE-2000-0338 by pre-creating directories in /tmp with predictable names (cvs-serv followed by a PID) to deny service to CVS users. The attack leverages the world-writable nature of /tmp and CVS's predictable temporary directory naming scheme.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H