Published: 29/01/2010 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

ViewVC prior to 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote malicious users to discover private root names by reading this view.

Vulnerable Product	Search on Vulmon	Subscribe to Product
viewvc viewvc 1.0.2
viewvc viewvc 1.0.1
viewvc viewvc 1.0.5
viewvc viewvc 1.1.2
viewvc viewvc 1.1.0
viewvc viewvc 1.1.1
viewvc viewvc 1.0.3
viewvc viewvc 1.0.4
viewvc viewvc 1.0.6
viewvc viewvc 1.0.8
viewvc viewvc 1.0.7

Debian Bug report logs - #575777 CVE-2010-0004 CVE-2010-0005 Package: viewvc; Maintainer for viewvc is Lev Lamberov <dogsleg@debianorg>; Source for viewvc is src:viewvc (PTS, buildd, popcon) Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Mon, 29 Mar 2010 07:54:02 UTC Severity: serious Tags: security Fi ...

Debian Bug report logs - #576307 CVE-2010-0132: XSS via user-provided 'search_re' input Package: viewvc; Maintainer for viewvc is Lev Lamberov <dogsleg@debianorg>; Source for viewvc is src:viewvc (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 2 Apr 2010 20:51:02 UTC Severity: gra ...

Debian Bug report logs - #575787 CVE-2010-0736: Cross-site scripting (XSS) vulnerability Package: viewvc; Maintainer for viewvc is Lev Lamberov <dogsleg@debianorg>; Source for viewvc is src:viewvc (PTS, buildd, popcon) Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Mon, 29 Mar 2010 09:12:02 UTC Severity ...

CWE-200 http://www.openwall.com/lists/oss-security/2010/01/13/5 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01421.html https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01464.html http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD http://www.openwall.com/lists/oss-security/2010/01/11/2 http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300 http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html http://www.openwall.com/lists/oss-security/2010/01/14/4 http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575777

CVE-2010-0004

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect