https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 06:50:13 +0000 https://vulnerability.circl.lu/vuln/cve-2017-12836 <p>CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by &#34;-oProxyCommand=id;localhost:/bar.&#34;</p> <p>CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by &#34;-oProxyCommand=id;localhost:/bar.&#34;</p> https://vulnerability.circl.lu/vuln/cve-2017-12836 https://vulnerability.circl.lu/vuln/usn-3399-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cvs, Ubuntu:16.04:LTS: cvs</p> <p>Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository that when accessed could run arbitrary code with the privileges of the user.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: cvs, Ubuntu:16.04:LTS: cvs</p> <p>Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository that when accessed could run arbitrary code with the privileges of the user.</p> https://vulnerability.circl.lu/vuln/usn-3399-1