FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0778

This CVE name corresponds to:

Entered	Topic
2004-08-17	cvs -- numerous vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0778 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0778
Phase	Assigned(20040811)

Description

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

References

Source	Reference
IDEFENSE	20040816 CVS Undocumented Flag Information Disclosure Vulnerability
CERT-VN	VU#579225
MANDRAKE	MDKSA-2004:108
BID	10955
OVAL	oval:org.mitre.oval:def:10688
XF	cvs-history-info-disclosure(17001)