Uninitialized Global Variable in CVS Allows Remote Denial of Service

CVE-2002-0092

CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.

Learn more about our Cis Benchmark Audit For Server Software.