TurboLinux: cvsweb privileges vulnerability

Linuxsecurity.com: “Current and previous version of cvsweb allow remote users to
access/write files as the default web user via the cvsweb.cgi script.”