CVE-2004-1342: Cvs

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.

Affected products

• Cvs Cvs: version 1.10 only; version 1.10.6 only; version 1.10.7 only; version 1.10.8 only; version 1.11 only; version 1.11.1 only; …

Published 2005-04-27. Last modified 2026-06-16.