Home › Blogs › Christoph C. Cemper's blog
Tools

CVS Root Security Flaw

<< Search fresh added Google pages with FreshGoo | Opera 7.5 released >>
Mon, 05/24/2004 - 15:30 — Christoph C. Cemper

A wild CVS flaw has Linux vendors rushing out patches and allows unauthorized access to code.

"A successful exploit would give access to the system with the privileges of the user running CVS, who obviously has access to all the code," said Thomas Kristensen, CTO of security firm Secunia. "A developer would often connect to CVS before he starts working on a piece of code, and synchronize with what is held on the server. If that code has been (maliciously) modified he could end up working with modified code."

Average rating
 
 
 
 
 
(0 votes)

Similar entries