vulnerability
FreeBSD: VID-D9FE59EA-1940-11E8-9EB8-5404A68AD561 (CVE-2017-12836): cvs -- Remote code execution via ssh command injection
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:H/Au:N/C:P/I:P/A:P) | Aug 10, 2017 | Feb 27, 2018 | May 7, 2019 |
Severity
5
CVSS
(AV:N/AC:H/Au:N/C:P/I:P/A:P)
Published
Aug 10, 2017
Added
Feb 27, 2018
Modified
May 7, 2019
Description
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
Solution
freebsd-upgrade-package-cvs
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.