CVE-2004-1342 Auth bypass in n/a

High 7.5 Published 27 Apr 2005 Updated 16 Sep 2024

Remote attackers can bypass authentication in CVS servers using the repouid patch via the pserver access method.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2004-1342?

CVE-2004-1342 is a high-severity authentication bypass vulnerability in n/a, published on 27 Apr 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.

Which versions are affected by CVE-2004-1342?

It affects 1 product.

Products include Cvs Cvs.

How do I fix CVE-2004-1342?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2004-1342 being exploited?

There is no known exploitation of CVE-2004-1342 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2004-1342, GHSA-j35r-wwj5-v97h.