CVE-2003-0015

Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as demonstrated by bypassing write checks to execute Update-prog and Checkin-prog commands.

• CWE-415

• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.html
• http://ccvs.cvshome.org/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14Broken Link
• http://marc.info/?l=bugtraq&m=104333092200589&w=2
• http://marc.info/?l=bugtraq&m=104342550612736&w=2
• http://marc.info/?l=bugtraq&m=104428571204468&w=2
• http://marc.info/?l=bugtraq&m=104438807203491&w=2
• http://rhn.redhat.com/errata/RHSA-2003-013.htmlPatch, Vendor Advisory
• http://security.e-matters.de/advisories/012003.htmlPatch, Vendor Advisory
• http://www.cert.org/advisories/CA-2003-02.htmlUS Government Resource
• http://www.ciac.org/ciac/bulletins/n-032.shtml
• http://www.debian.org/security/2003/dsa-233
• http://www.kb.cert.org/vuls/id/650937Third Party Advisory, US Government Resource
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:009
• http://www.redhat.com/support/errata/RHSA-2003-012.html
• http://www.securityfocus.com/bid/6650
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11108
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.html
• http://ccvs.cvshome.org/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14Broken Link
• http://marc.info/?l=bugtraq&m=104333092200589&w=2
• http://marc.info/?l=bugtraq&m=104342550612736&w=2
• http://marc.info/?l=bugtraq&m=104428571204468&w=2
• http://marc.info/?l=bugtraq&m=104438807203491&w=2
• http://rhn.redhat.com/errata/RHSA-2003-013.htmlPatch, Vendor Advisory
• http://security.e-matters.de/advisories/012003.htmlPatch, Vendor Advisory
• http://www.cert.org/advisories/CA-2003-02.htmlUS Government Resource
• http://www.ciac.org/ciac/bulletins/n-032.shtml
• http://www.debian.org/security/2003/dsa-233
• http://www.kb.cert.org/vuls/id/650937Third Party Advisory, US Government Resource
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:009
• http://www.redhat.com/support/errata/RHSA-2003-012.html
• http://www.securityfocus.com/bid/6650
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11108

Published

Feb 7, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0009Cross-site scripting (XSS) vulnerability in Help and Support…
• CVE-2003-0010Integer overflow in JsArrayFunctionHeapSort function used by…
• CVE-2003-0011Unknown vulnerability in the DNS intrusion detection applica…
• CVE-2003-0012The data collection script for Bugzilla 2.14.x before 2.14.5…
• CVE-2003-0013The default .htaccess scripts for Bugzilla 2.14.x before 2.1…
• CVE-2003-0014gsinterf.c in bmv 1.2 and earlier allows local users to over…
• CVE-2003-0016Apache before 2.0.44, when running on unpatched Windows 9x a…
• CVE-2003-0017Apache 2.0 before 2.0.44 on Windows platforms allows remote …
• CVE-2003-0018Linux kernel 2.4.10 through 2.4.21-pre4 does not properly ha…
• CVE-2003-0019uml_net in the kernel-utils package for Red Hat Linux 8.0 ha…
• CVE-2003-0020Apache does not filter terminal escape sequences from its er…
• CVE-2003-0021The "screen dump" feature in Eterm 0.9.1 and earlier allows …