PT-2004-1036 · Viewcvs · Viewcvs

Publicado 2004-12-10 · Atualizado 2017-07-11 · CVE-2004-0915

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions viewcvs versions prior to 0.9.2

Description The issue concerns multiple unknown vulnerabilities in the viewcvs package. These vulnerabilities can be exploited remotely, potentially leading to the disclosure of sensitive information due to the improper implementation of certain settings when exporting a repository as a tar archive.

Recommendations For versions prior to 0.9.2, update to version 0.9.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the repository export feature until a patch is available.

Correção

Identificadores relacionados

BDU:2015-03476

CVE-2004-0915

DSA-605-1

Produtos afetados

Viewcvs

Referências · 7

• https://bdu.fstec.ru/vul/2015-03476 · Nota de Segurança
• http://debian.org/security/2004/dsa-605 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18369 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0915 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0915 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0915 · Nota de Segurança
• http://debian.org/security/dsa-605 · Nota