CVE-2002-0844: Distrotech Cvs

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.

Affected products

• Distrotech Cvs: before 1.11.2 (fixed in 1.11.2)

Published 2002-08-12. Last modified 2026-06-16.