PT-2004-1036 · Viewcvs · Viewcvs

Published 2004-12-10 · Updated 2017-07-11 · CVE-2004-0915

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions viewcvs versions prior to 0.9.2

Description The issue concerns multiple unknown vulnerabilities in the viewcvs package. These vulnerabilities can be exploited remotely, potentially leading to the disclosure of sensitive information due to the improper implementation of certain settings when exporting a repository as a tar archive.

Recommendations For versions prior to 0.9.2, update to version 0.9.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the repository export feature until a patch is available.

Fix

Related Identifiers

BDU:2015-03476

CVE-2004-0915

DSA-605-1

Affected Products

Viewcvs

References · 7

• https://bdu.fstec.ru/vul/2015-03476 · Security Note
• http://debian.org/security/2004/dsa-605 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-0915 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18369 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0915 · Note
• http://debian.org/security/dsa-605 · Note