Candidate: CVE-2010-0004 PublicDate: 2010-01-29 18:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0004 Description: ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_viewvc: upstream_viewvc: released (1.1.3) dapper_viewvc: DNE hardy_viewvc: ignored (reached end-of-life) intrepid_viewvc: needs-triage (reached end-of-life) jaunty_viewvc: ignored (reached end-of-life) karmic_viewvc: ignored (reached end-of-life) lucid_viewvc: ignored (reached end-of-life) maverick_viewvc: not-affected (1.1.5-1) natty_viewvc: not-affected (1.1.5-1) oneiric_viewvc: not-affected (1.1.5-1) precise_viewvc: not-affected (1.1.5-1) quantal_viewvc: not-affected (1.1.5-1) raring_viewvc: not-affected (1.1.5-1) saucy_viewvc: not-affected (1.1.5-1) devel_viewvc: not-affected (1.1.5-1)