CVS information leak

By using undocumented -X key for 'cvs history' command it's possible to check existance of system files...