CVE-2005-2693: Cvs

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.

Affected products

• Cvs Cvs: version 1.12.12 only

Published 2005-08-26. Last modified 2026-06-16.