Lucene search
Ubuntu.comUB:CVE-2008-1291HistoryMar 24, 2008 - 12:00 a.m.
CVE-2008-1291
2008-03-2400:00:00
ubuntu.com
ubuntu.com
12
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.006
Percentile
79.4%
ViewVC before 1.0.5 stores sensitive information under the web root with
insufficient access control, which allows remote attackers to read files
and list folders under the hidden CVSROOT folder.
Related
cvelist
cvelist
CVE-2008-1291
2008-03-24 17:00:00
debiancve
debiancve
CVE-2008-1291
2008-03-24 17:44:00
redhatcve
redhatcve
CVE-2008-1291
2019-10-04 21:57:40
nvd
nvd
CVE-2008-1291
2008-03-24 17:44:00
cve
cve
CVE-2008-1291
2008-03-24 17:44:00
prion
prion
Improper access control
2008-03-24 17:44:00
nessus
nessus
ViewVC Direct Request CVSROOT Information Disclosure
2008-05-19 00:00:00
openSUSE 10 Security Update : viewvc (viewvc-5358)
2008-08-01 00:00:00
SuSE 10 Security Update : Subversion (ZYPP Patch Number 5362)
2008-08-01 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200803-29 (viewvc)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200803-29 (viewvc)
2008-09-24 00:00:00
SuSE Update for net-snmp SUSE-SA:2008:039
2009-01-23 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-03-20 00:00:00
[ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities
2008-03-20 00:00:00
gentoo
gentoo
ViewVC: Multiple vulnerabilities
2008-03-19 00:00:00
suse
suse
authentication bypass, denial-of-service in net-snmp
2008-08-01 13:33:56
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.006
Percentile
79.4%
Related for UB:CVE-2008-1291