7.1

CVE-2004-1471: cvs

CVSS: 7.1v2.0HighModified
AliasesDEBIAN-CVE-2004-1471
Published 13-02-2005Last modified 08-08-2024
Open JSON
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2004-1471 is a high (CVSS 7.1) vulnerability in cvs. EPSS estimates a 7.72% chance of exploitation in the next 30 days, higher than 94.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v2.0 (NVD)
EPSS score
7.72%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Timeline

  1. 13-02-2005
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

7.72%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 7.72% on 18-09-2026

18-09-202618-10-2026
EPSS score
7.72%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databaselocallinuxVerified

    CVS 1.11.x - Multiple Vulnerabilities

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Cvs1 product
  • cvs1.10.7 | 1.10.8 | 1.11 | 1.11.1 | 1.11.1_p1 | 1.11.2 | 1.11.3 | 1.11.4 | 1.11.5 | 1.11.6 | 1.11.10 | 1.11.11 | 1.11.14 | 1.11.15 | 1.11.16 | 1.12.1 | 1.12.2 | 1.12.5 | 1.12.7 | 1.12.8
Debian1 product
  • cvs< 1:1.12.9
Freebsd1 product
  • freebsdEOL1.1.5.1 | 2.0 | 2.0.5 | 2.1.0 | 2.1.5 | 2.1.6 | 2.1.6.1 | 2.1.7.1 | 2.2 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.8 | 3.0 | 3.0:releng | 3.1 | 3.2 | 3.3 | 3.4 | 3.5 | 3.5:stable | 3.5.1 | 3.5.1:release | 3.5.1:stable | 4.0 | 4.0:alpha | 4.0:releng | 4.1 | 4.1.1 | 4.1.1:release | 4.1.1:stable | 4.2 | 4.2:stable | 4.3 | 4.3:release | 4.3:release_p38 | 4.3:releng | 4.3:stable | 4.4 | 4.4:release_p42 | 4.4:releng | 4.4:stable | 4.5 | 4.5:release | 4.5:release_p32 | 4.5:releng | 4.5:stable | 4.6 | 4.6:release | 4.6:release_p20 | 4.6:releng | 4.6:stable | 4.6.2 | 4.7 | 4.7:release | 4.7:release_p17 | 4.7:releng | 4.7:stable | 4.8 | 4.8:pre-release | 4.8:release_p6 | 4.8:releng | 4.9 | 4.9:pre-release | 4.9:releng | 4.10 | 4.10:release | 4.10:releng | 5.0 | 5.0:alpha | 5.0:release_p14 | 5.0:releng | 5.1 | 5.1:alpha | 5.1:release | 5.1:release_p5 | 5.1:releng | 5.2 | 5.2.1:release | 5.2.1:releng
Gentoo1 product
Openbsd1 product
Openpkg1 product
Sgi1 product

7 vendors · 7 products

References

5 links