CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

• CWE-203

• http://www.idefense.com/application/poi/display?id=130&type=vulnerabilitiesBroken Link, Vendor Advisory
• http://www.kb.cert.org/vuls/id/579225Patch, Third Party Advisory, US Government Resource
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:108Broken Link
• http://www.securityfocus.com/bid/10955Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17001Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10688Broken Link
• http://www.idefense.com/application/poi/display?id=130&type=vulnerabilitiesBroken Link, Vendor Advisory
• http://www.kb.cert.org/vuls/id/579225Patch, Third Party Advisory, US Government Resource
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:108Broken Link
• http://www.securityfocus.com/bid/10955Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17001Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10688Broken Link

Published

Oct 20, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0770romload.c in DGen Emulator 1.23 and earlier allows local use…
• CVE-2004-0771Buffer overflow in the extract_one function from lhext.c in …
• CVE-2004-0772Double free vulnerabilities in error handling code in krb524…9.8
• CVE-2004-0774RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.…
• CVE-2004-0775Buffer overflow in WIDCOMM Bluetooth Connectivity Software, …
• CVE-2004-0777Format string vulnerability in the auth_debug function in Co…
• CVE-2004-0779The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 we…
• CVE-2004-0780Buffer overflow in uustat in Sun Solaris 8 and 9 allows loca…
• CVE-2004-0781Cross-site scripting (XSS) vulnerability in list.cgi in the …
• CVE-2004-0782Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the…
• CVE-2004-0783Stack-based buffer overflow in xpm_extract_color (io-xpm.c) …
• CVE-2004-0784The smiley theme functionality in Gaim before 0.82 allows re…