Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-5024
HistoryMay 23, 2011 - 12:00 a.m.

CVE-2009-5024

2011-05-2300:00:00
ubuntu.com
ubuntu.com
4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%

ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit
configuration setting, and consequently conduct resource-consumption
attacks, via the limit parameter, as demonstrated by a “query revision
history” request.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchviewvc< 1.1.5-1.1+squeeze2build0.12.04.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%