Infinite loop in "cvs server"

[Pavel Roskin]

Hello!

This bug is observed with the CVS version of CVS on Red Hat Linux 8.0 
(gcc-3.2).

I run "cvs server" from the command line (I tried Linux console and rxvt - 
same result), then I press Ctrl-C and Ctrl-D.

This message is printed continuously:

cvs: buffer.c:1384: stdio_buffer_shutdown: Assertion `fstat ( fileno 
(bc->fp), &s ) != -1' failed.

I can only kill cvs by the "KILL" signal.

I cannot reproduce this bug over ssh (OpenSSH_3.4p1) - cvs terminates on
Ctrl-C.  However, I cannot exclude the possibility that this bug can be
exploited to execute random commands on a server that only allows the user
to execute "cvs server".

-- 
Regards,
Pavel Roskin