CVE-2004-1471
CVS 1.11.x-1.11.16 and 1.12.x-1.12.8 - Remote Code Execution via Format String in Wrapper Line
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1471. PoCs published by Gyan Chawdhary.
AI-analyzed exploit summary This exploit targets a double-free vulnerability in CVS <= 1.11.15 via the error_prog_name buffer, leveraging heap manipulation to achieve remote code execution. It uses a crafted sequence of Argumentx and Argument commands to corrupt memory and execute shellcode.
Description
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
Exploits (1)
This exploit targets a double-free vulnerability in CVS <= 1.11.15 via the error_prog_name buffer, leveraging heap manipulation to achieve remote code execution. It uses a crafted sequence of Argumentx and Argument commands to corrupt memory and execute shellcode.