CVE-2003-0015: cvs Double Free

EPSS trend

Probability

23.87%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 23.87% on 18-09-2026

18-09-202618-10-2026

EPSS score

23.87%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotelinuxVerified
CVS 1.11.x - Directory Request Double-Free Heap Corruption
Maturity: weaponized

References

17 links

www.redhat.com/support/errata/RHSA-2003-012.htmlVendor AdvisoryX Refsource REDHAT
ccvs.cvshome.org/servlets/NewsItemView?newsID=51&JServSessionIdservlets=5of2iuhr14X Refsource CONFIRMBroken Link
marc.info?l=bugtraq&m=104342550612736&w=2Mailing ListX Refsource BUGTRAQ
www.mandrakesoft.com/security/advisories?name=MDKSA-2003:009Vendor AdvisoryX Refsource MANDRAKE
marc.info?l=bugtraq&m=104438807203491&w=2Vendor AdvisoryX Refsource FREEBSD
www.securityfocus.com/bid/6650VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/11108VDB EntryX Refsource XF
marc.info?l=bugtraq&m=104333092200589&w=2Mailing ListX Refsource BUGTRAQ
rhn.redhat.com/errata/RHSA-2003-013.htmlVendor AdvisoryX Refsource REDHATPatch
marc.info?l=bugtraq&m=104428571204468&w=2Mailing ListX Refsource BUGTRAQ

Show all 17 references

www.debian.org/security/2003/dsa-233Vendor AdvisoryX Refsource DEBIAN
www.kb.cert.org/vuls/id/650937Third Party AdvisoryX Refsource CERT VNUS Government Resource
security.e-matters.de/advisories/012003.htmlX Refsource MISCPatchVendor Advisory
www.cert.org/advisories/CA-2003-02.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.ciac.org/ciac/bulletins/n-032.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
archives.neohapsis.com/archives/vulnwatch/2003-q1/0028.htmlMailing ListX Refsource VULNWATCH
security-tracker.debian.org/tracker/CVE-2003-0015Advisory

Related vulnerabilities

CVE-2003-0977cvscvs+22.29%22y ago10-12-2003 05:00CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests.CVE-2025-15576freebsdfreebsd0.11%7mo ago09-03-2026 11:54If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed processes may nonetheless be able to access a shared directory via a nullfs mount, if the administrator has configured one. In this case, cooperating processes in the two jails may establish a connection using a unix domain socket and exchange directory descriptors with each other. When performing a filesystem name lookup, at each step of the lookup, the kernel checks whether the lookup would descend below the jail root of the current process. If the jail root directory is not encountered, the lookup continues. In a configuration where processes in two different jails are able to exchange file descriptors using a unix domain socket, it is possible for a jailed process to receive a directory for a descriptor that is below that process' jail root. This enables full filesystem access for a jailed process, breaking the chroot. Note that the system administrator is still responsible for ensuring that an unprivileged user on the jail host is not able to pass directory descriptors to a jailed process, even in a patched kernel.CVE-2005-2693cvscvs+40.44%21y ago25-08-2005 04:00cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.CVE-2005-0753cvscvs+34.75%21y ago21-04-2005 04:00Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.CVE-2012-0804alpinecvs+68.37%14y ago29-05-2012 20:00Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.CVE-2000-0680cvscvs1.34%26y ago21-09-2000 04:00The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action.

All vulnerabilities incvs freebsd

CVE-2003-0015: cvs Double Free

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References