CVE-2003-0977: Cvs

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.

Affected products

• Cvs Cvs: version 1.10.7 only; version 1.10.8 only; version 1.11 only; version 1.11.1 only; version 1.11.1_p1 only; version 1.11.2 only; …
• Slackware Slackware Linux: version 8.1 only; version 9.0 only; version 9.1 only

Published 2004-01-05. Last modified 2026-06-16.