CVE-2004-0418

CVE-2004-0418 describes a critical vulnerability in CVS versions 1.12.x through 1.12.8 and 1.11.x through 1.11.16, affecting products like Gentoo and OpenBSD. This flaw, rated with a CVSS score of 10.0, stems from improper handling of empty data lines in the serve_notify function, allowing remote attackers to achieve an out-of-bounds write. Such an attack could lead to arbitrary code execution or modification of critical program data, representing a complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.