Candidate: CVE-2008-4325
PublicDate: 2008-09-30 16:13:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4325
Description:
 lib/viewvc.py in ViewVC 1.0.5 uses the content-type parameter in the HTTP
 request for the Content-Type header in the HTTP response, which allows
 remote attackers to cause content to be misinterpreted by the browser via a
 content-type parameter that is inconsistent with the requested object.
 NOTE: this issue might not be a vulnerability, since it requires attacker
 access to the repository that is being viewed.
Ubuntu-Description:
Notes:
Bugs:
Priority: negligible
Discovered-by:
Assigned-to:
CVSS: 

Patches_viewvc:
upstream_viewvc: released (1.0.9-1)
dapper_viewvc: DNE
feisty_viewvc: DNE
gutsy_viewvc: needs-triage (reached end-of-life)
hardy_viewvc: ignored (reached end-of-life)
intrepid_viewvc: needed (reached end-of-life)
jaunty_viewvc: ignored (reached end-of-life)
karmic_viewvc: ignored (reached end-of-life)
lucid_viewvc: not-affected (1.0.9-1)
maverick_viewvc: not-affected (1.0.9-1)
natty_viewvc: not-affected (1.0.9-1)
oneiric_viewvc: not-affected (1.0.9-1)
devel_viewvc: not-affected (1.0.9-1)