FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0915

This CVE name corresponds to:

Entered	Topic
2004-12-08	viewcvs -- information leakage

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0915 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0915
Phase	Assigned(20040927)

Description

Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.

References

Source	Reference
DEBIAN	DSA-605
XF	viewcvs-repository-weak-security(18369)