Red Hat Customer Portal

Skip to main content

Security Advisory cvs security update

Advisory: RHSA-2004:153-09
Type: Security Advisory
Severity: Moderate
Issued on: 2004-04-14
Last updated on: 2004-04-17
Affected Products: Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux WS (v. 2.1)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor
CVEs (cve.mitre.org): CVE-2004-0180
CVE-2004-0405

Details

Updated cvs packages that fix a client vulnerability that could be
exploited by a malicious server are now available.

[Updated Apr 19 2004]
The description text has been updated to include CAN-2004-0405 which was
also fixed but not mentioned when this advisory was first released. There
has been no change to the packages associated with this advisory.

CVS is a version control system frequently used to manage source code
repositories.

Sebastian Krahmer discovered a flaw in CVS clients where rcs diff files can
create files with absolute pathnames. An attacker could create a fake
malicious CVS server that would cause arbitrary files to be created or
overwritten when a victim connects to it. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2004-0180 to
this issue.

Derek Price discovered a vulnerability whereby a CVS pserver could be
abused by a malicious client to view the contents of certain files outside
of the CVS root directory using relative pathnames containing "../". The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-0405 to this issue.

Users of CVS are advised to upgrade to these erratum packages, which
contain a patch correcting this issue.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Updated packages

Red Hat Enterprise Linux AS (v. 2.1)

IA-32:
cvs-1.11.1p1-12.i386.rpm
File outdated by:  RHSA-2005:756
    MD5: 35f90c3f12d5890ad8e12813de8976dc
 
IA-64:
cvs-1.11.1p1-12.ia64.rpm
File outdated by:  RHSA-2005:756
    MD5: c6f5c79e554beb1d8b40c05e64782a76
 
Red Hat Enterprise Linux AS (v. 3)

IA-32:
cvs-1.11.2-18.i386.rpm
File outdated by:  RHSA-2005:756
    MD5: a05510025d541d009af264b36dbf21ab
 
IA-64:
cvs-1.11.2-18.ia64.rpm
File outdated by:  RHSA-2005:756
    MD5: d4fdda36b5438129bbaaf3f1d60d286a
 
PPC:
cvs-1.11.2-18.ppc.rpm
File outdated by:  RHSA-2005:756
    MD5: 77a9b7bf2dad7eaaa9c03b8bb323466a
 
s390:
cvs-1.11.2-18.s390.rpm
File outdated by:  RHSA-2005:756
    MD5: f40100476c965466650490894e27d806
 
s390x:
cvs-1.11.2-18.s390x.rpm
File outdated by:  RHSA-2005:756
    MD5: 53a95d3c9fe4d603110cfceb5a953612
 
x86_64:
cvs-1.11.2-18.x86_64.rpm
File outdated by:  RHSA-2005:756
    MD5: 0130ce0aa0d51b3c556114d01bf30e7a
 
Red Hat Enterprise Linux ES (v. 2.1)

IA-32:
cvs-1.11.1p1-12.i386.rpm
File outdated by:  RHSA-2005:756
    MD5: 35f90c3f12d5890ad8e12813de8976dc
 
Red Hat Enterprise Linux ES (v. 3)

IA-32:
cvs-1.11.2-18.i386.rpm
File outdated by:  RHSA-2005:756
    MD5: a05510025d541d009af264b36dbf21ab
 
Red Hat Enterprise Linux WS (v. 2.1)

IA-32:
cvs-1.11.1p1-12.i386.rpm
File outdated by:  RHSA-2005:756
    MD5: 35f90c3f12d5890ad8e12813de8976dc
 
Red Hat Enterprise Linux WS (v. 3)

IA-32:
cvs-1.11.2-18.i386.rpm
File outdated by:  RHSA-2005:756
    MD5: a05510025d541d009af264b36dbf21ab
 
IA-64:
cvs-1.11.2-18.ia64.rpm
File outdated by:  RHSA-2005:756
    MD5: d4fdda36b5438129bbaaf3f1d60d286a
 
x86_64:
cvs-1.11.2-18.x86_64.rpm
File outdated by:  RHSA-2005:756
    MD5: 0130ce0aa0d51b3c556114d01bf30e7a
 
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor

IA-64:
cvs-1.11.1p1-12.ia64.rpm
File outdated by:  RHSA-2005:756
    MD5: c6f5c79e554beb1d8b40c05e64782a76
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

118719 - CAN-2004-0180 Malicious CVS server


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/