CVE-2010-1326

perms.cpp in March Hare Software CVSNT 2.0.58, 2.5.01, 2.5.02, 2.5.03 before build 3736, 2.5.04 before build 2862; CVS Suite 2.5.03, 2008 before build 3736, and 2009 before 3729 allows remote attackers to bypass the permissions check, modify arbitrary modules and directories within CVSROOT, and execute arbitrary code via a crafted branch name ACL, possibly related to incorrect inheritance.

• CWE-264

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884
• http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1&id=1790&action=view
• http://march-hare.com/cvspro/vuln.htmVendor Advisory
• http://secunia.com/advisories/41345Vendor Advisory
• http://secunia.com/advisories/41358Vendor Advisory
• http://www.debian.org/security/2010/dsa-2108
• http://www.vupen.com/english/advisories/2010/2350Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593884
• http://customer.march-hare.com/webtools/bugzilla/attachment.cgi?tt=1&id=1790&action=view
• http://march-hare.com/cvspro/vuln.htmVendor Advisory
• http://secunia.com/advisories/41345Vendor Advisory
• http://secunia.com/advisories/41358Vendor Advisory
• http://www.debian.org/security/2010/dsa-2108
• http://www.vupen.com/english/advisories/2010/2350Vendor Advisory

Published

Sep 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1320Double free vulnerability in do_tgs_req.c in the Key Distrib…
• CVE-2010-1321The kg_accept_krb5 function in krb5/accept_sec_context.c in …
• CVE-2010-1322The merge_authdata function in kdc_authdata.c in the Key Dis…
• CVE-2010-1323MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x,…
• CVE-2010-1324MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does…
• CVE-2010-1325Cross-site request forgery (CSRF) vulnerability in the apach…
• CVE-2010-1327Multiple SQL injection vulnerabilities in TornadoStore 1.4.3…
• CVE-2010-1328Multiple cross-site scripting (XSS) vulnerabilities in Torna…
• CVE-2010-1329Imperva SecureSphere Web Application Firewall and Database F…
• CVE-2010-1330The regular expression engine in JRuby before 1.4.1, when $K…
• CVE-2010-1331SQL injection vulnerability in Heartlogic HL-SiteManager all…
• CVE-2010-1332Cross-site scripting (XSS) vulnerability in PrettyBook Prett…