SuSE Security Advisory SuSE-SA:2004:008 – Two vulnerabilities have been discovered in CVS that can be exploited by malicious servers to compromise clients and by malicious users to retrieve arbitrary files from servers. Versions below 1.11.15 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33093/SuSE-SA%3A2004%3A008.txt
Source: https://packetstormsecurity.com/files/33093/SuSE-SA-2004-008.txt.html