Secunia

Two vulnerabilities have been discovered in CVS. These can be exploited by malicious servers to compromise clients and by malicious users to retrieve arbitrary files from a vulnerable server.

1) Missing validation of paths within CVS clients makes it possible to create RCS diff files with absolute paths. This may allow creation or overwriting of files in arbitrary locations on a user's system.

Successful exploitation requires that a user is tricked into connecting to a malicious CVS server.

2) An error in the server makes it possible for users to request the content of arbitrary RCS archive files above $CVSROOT.

Solution
Update to version 1.11.15 or 1.12.7.
Further details available in Customer Area

Provided and/or discovered by
Sebastian Krahmer, SuSE Security Team.

Deep Links
Links available in Customer Area