CVE-2002-0844

HIGH 7.8CVE-2002-0844 · Published 12/08/2002 · updated 16/06/2026

In short

CVE-2002-0844 is a HIGH (CVSS 7.8) vulnerability affecting cvs (distrotech).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.4% of all vulnerabilities.
Fix: update to 1.11.2 or later.

Package	Affected versions	Patched versions
cvs distrotech	`< 1.11.2`	`1.11.2`

Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.