CVE-2004-0915

Publication date 10 January 2005

Last updated 24 July 2024


Ubuntu priority

Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
viewcvs 7.04 feisty
Fixed 0.9.2+cvs.1.0.dev.2004.07.28-4ubuntu1
6.10 edgy
Fixed 0.9.2+cvs.1.0.dev.2004.07.28-4ubuntu1
6.06 LTS dapper
Fixed 0.9.2+cvs.1.0.dev.2004.07.28-4ubuntu1
viewvc 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release