CVE-2004-0405

CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.ascPatch, Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.ascPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=108636445031613&w=2
• http://security.gentoo.org/glsa/glsa-200404-13.xml
• http://www.debian.org/security/2004/dsa-486Patch, Vendor Advisory
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15891
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.ascPatch, Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.ascPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=108636445031613&w=2
• http://security.gentoo.org/glsa/glsa-200404-13.xml
• http://www.debian.org/security/2004/dsa-486Patch, Vendor Advisory
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15891
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818

Published

Jun 1, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0399Stack-based buffer overflow in Exim 3.35, and other versions…
• CVE-2004-0400Stack-based buffer overflow in Exim 4 before 4.33, when the …
• CVE-2004-0401Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.…
• CVE-2004-0402Buffer overflow in xpcd-svga in xpcd before 2.08, and possib…
• CVE-2004-0403Racoon before 20040408a allows remote attackers to cause a d…
• CVE-2004-0404logcheck before 1.1.1 allows local users to overwrite arbitr…
• CVE-2004-0406Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0407The HTML form upload capability in ColdFusion MX 6.1 does no…
• CVE-2004-0408Buffer overflow in the child_service function in the ident2 …
• CVE-2004-0409Stack-based buffer overflow in the Socks-5 proxy code for XC…
• CVE-2004-0410Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-0411The URI handlers in Konqueror for KDE 3.2.2 and earlier do n…