2011 matches found
Debian Security Advisory DSA 422-1 (cvs)
The remote host is missing an update to cvs announced via advisory DSA 422-1. OpenVAS Vulnerability Test $Id: deb4221.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 422-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
QGit: Insecure temporary file creation
Background QGit is a graphical interface to git repositories that allows you to browse revisions history, view patch content and changed files. Description Raphael Marichez discovered that the DataLoader::doStart method creates temporary files in an insecure manner and executes them. Impact A loc...
MDKA-2007:035 : curl
The curl shipped with 2007.0 had a bug which prevented it from working with the Club repositories, meaning users could not access the Club repositories unless they switched the default downloader for urpmi and rpmdrake to be wget. This update fixes the bug and allows the Club repositories to work...
CVE-2004-2633
Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other users via unknown vectors...
Chora Detection
This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...
Slackware 8.1 / 9.0 / 9.1 / current : cvs security update (SSA:2004-108-02)
CVS is a client/server version control system. As a server, it is used to host source code repositories. As a client, it is used to access such repositories. This advisory affects both uses of CVS. A security problem which could allow a server to create arbitrary files on a client machine, and...
CVE-2004-2633
Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other users via unknown vectors...
GLSA-200409-35 : Subversion: Metadata information leak
The remote host is affected by the vulnerability described in GLSA-200409-35 Subversion: Metadata information leak There is a bug in modauthzsvn that causes it to reveal logged metadata regarding commits to protected areas. Impact : Protected files themselves will not be revealed, but an attacker...
Horde Chora Software Detection
The remote host is running Chora, a PHP-based interface to CVS repositories from the Horde Project. This script was written by George A. Theall, . See the Nessus Scripts License for details. include"compat.inc"; if description scriptid13849; scriptversion"1.26";...
CVS path validation errors
Two programming errors were discovered in which path names handled by CVS were not properly validated. In one case, the CVS client accepts absolute path names from the server when determining which files to update. In another case, the CVS server accepts relative path names from the client when...
