When using an asterix (*) in the comment field (-m) this asterix is expanded and not left as an asterix.
I believe that the asterix and other special characters in the comment should not be expanded.
line 813 of cvs.tcl reads:
$v\::do "$cvs commit -R $revflag -m \"$comment\" $filelist" 0
I think it should read:
$v\::do "$cvs commit -R $revflag -m '$comment' $filelist" 0