CVE-2000-0338
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
Risk Assessment
An attacker can block access to CVS functions, leading to downtime for users and potential losses for the organization.
Recommendation
It is recommended to change the method of generating temporary file names in CVS to make them less predictable and to monitor access to the system by local users.
Original NVD description (English source)
Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.