CVE-2000-0679: Cvs

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.

Affected products

• Cvs Cvs: version 1.10.8 only

Published 2000-10-20. Last modified 2026-06-16.