CVE-2000-0338

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 23, 2000
Updated: Nov 20, 2024
CWE ID 667

Summary

CVE-2000-0338 is a vulnerability affecting Concurrent Versions Software (CVS). This issue arises due to CVS using predictable names for temporary files used in locking mechanisms. An attacker can exploit this by creating the lock directory before it is generated for legitimate use, resulting in a denial of service for CVS operations. This vulnerability allows local users to disrupt CVS functionalities, potentially causing significant disruptions in software development environments.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share