Re: [Fwd: Help needed with bufferoverflow in cvs]

[Matt Riechers]

Martin Schulze wrote:
> 
> > | it seems that cvs (version 1.10.7 from Debians stable repos) has a
> > | bufferoverflow but I'm but sure if it's exploitable
...
> klecker!joey(pts/15):~/tmp/webwml> cvs diff -C`perl -e "print 'a' x 300"`  
> Makefile || echo noe
...
> cvs server: invalid context length argument
> Terminated with fatal signal 11

The current stable release of CVS (1.11.1p1) seems to have fixed this. It does
not segfault on this command.

-Matt