Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-0915
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
66.2%
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.
Affected configurations
Node
viewcvsviewcvsMatch0.9.2
Node
debiandebian_linuxMatch3.0
ORdebiandebian_linuxMatch3.0alpha
ORdebiandebian_linuxMatch3.0arm
ORdebiandebian_linuxMatch3.0hppa
ORdebiandebian_linuxMatch3.0ia-32
ORdebiandebian_linuxMatch3.0ia-64
ORdebiandebian_linuxMatch3.0m68k
ORdebiandebian_linuxMatch3.0mips
ORdebiandebian_linuxMatch3.0mipsel
ORdebiandebian_linuxMatch3.0ppc
ORdebiandebian_linuxMatch3.0s-390
ORdebiandebian_linuxMatch3.0sparc
| Vendor | Product | Version | CPE |
|---|---|---|---|
| viewcvs | viewcvs | 0.9.2 | cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:* |
Related
nessus
nessus
Debian DSA-605-1 : viewcvs - settings not honored
2004-12-06 00:00:00
GLSA-200412-26 : ViewCVS: Information leak and XSS vulnerabilities
2004-12-28 00:00:00
freebsd
freebsd
viewcvs -- information leakage
2004-11-25 00:00:00
openvas
openvas
FreeBSD Ports: viewcvs
2008-09-04 00:00:00
Debian Security Advisory DSA 605-1 (viewcvs)
2008-01-17 00:00:00
FreeBSD Ports: viewcvs
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 605-1] New viewcvs packages fix information leak
2004-12-06 10:18:18
[SECURITY] [DSA 605-1] New viewcvs packages fix information leak
2004-12-06 10:18:18
ubuntucve
ubuntucve
CVE-2004-0915
2005-01-10 00:00:00
securityvulns
securityvulns
cvelist
cvelist
CVE-2004-0915
2004-12-10 05:00:00
cve
cve
CVE-2004-0915
2005-01-10 05:00:00
osv
osv
viewcvs - settings not honored
2004-12-06 00:00:00
gentoo
gentoo
ViewCVS: Information leak and XSS vulnerabilities
2004-12-28 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
66.2%
Related for NVD:CVE-2004-0915