PT-2009-5894 · Viewvc · Viewvc

Thomas Biege · Published 2009-11-10 · Updated 2018-08-13 · CVE-2009-3619

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ViewVC versions 1.0 through 1.0.8 ViewVC versions 1.1 through 1.1.1

Description The issue is related to printing illegal parameter names and values, and it has unknown impact and remote attack vectors.

Recommendations For ViewVC versions 1.0 through 1.0.8, update to version 1.0.9 or later. For ViewVC versions 1.1 through 1.1.1, update to version 1.1.2 or later.

Fix

Related Identifiers

CVE-2009-3619

Affected Products

Viewvc

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2009-3619 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00566.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/2257 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-3619 · Vendor Advisory
• http://secunia.com/advisories/36292 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-August/msg00557.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html · Vendor Advisory
• http://secunia.com/advisories/36311 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3619 · Note
• http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.2/CHANGES?revision=2235&pathrev=HEAD · Note
• http://openwall.com/lists/oss-security/2009/10/16/10 · Note