Bugtraq mailing list archives

Re: CVS DoS


From: kris () FREEBSD ORG (Kris Kennaway)
Date: Mon, 24 Apr 2000 15:17:27 -0700


On Mon, 24 Apr 2000, Kris Kennaway wrote:

of the filesystem used by CVS to maintain its lock state. It's also not
quite as serious as it might first sound, because anyone who can
legitimately connect to the CVS server remotely via CVS can cause a lock
to be taken out over any part of the repository, with the same effect.

Sorry, but on further thought I don't think this is true. Locks are only
acquired for CVS write operations, not read operations.

Kris

----
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe () alum mit edu>



Current thread: